CVE-2000-0769

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...

CVE-2000-0769

The CVE-2000-0769 entry concerns O'Reilly WebSite Pro 2.3.7 where uploader.exe is installed with execute permissions for all users, enabling remote attackers to create and execute arbitrary files by directly calling uploader.exe. This describes a direct misuse of file permissions leading to arbit...

CVE-2000-0769

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...

CVE-2000-0769: Undefined Security Weakness

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...

Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717)

Cerberus Information Security Advisory CISADV000717 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 17th July 2000 Name : Website Pro GET buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : David Litchfie...

Alert: Buffer Overrun is O'Reilly WebsitePro webfind.exe (CISADV000718)

Cerberus Information Security Advisory CISADV000718 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 18th July 2000 Name : Website Pro webfind.exe buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : Robert...

CVE-2000-0066

WebSite Pro is affected by CVE-2000-0066: remote attackers can reveal the real pathname of web directories through a malformed URL request, causing information disclosure (partial confidentiality impact). The vulnerability is documented in multiple sources (NVD/CVE listings and a Nessus plugin). ...

CVE-2000-0066: Undefined Security Weakness

WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request...

WebSite Pro Malformed URL Path Disclosure

It was possible to discover the physical location of a virtual web directory of this host by issuing the command : GET /HTTP1.0/ This can reveal valuable information to an attacker, allowing them to focus their attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

website.pro.txt

Date: Tue, 16 Feb 1999 17:45:09 -0600 From: Christian Antkow To: [email protected] Subject: Website Pro v2.0 NT Configuration Issues As some of you might be aware, our website www.idsoftware.com was hacked this morning using the "out-of-the-box" features of Website Pro 2.0. The perpetrator use...