387 matches found
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2003-0709
CVE-2003-0709 describes a buffer overflow in the whois client (not setuid) that can be triggered when the program is called from within CGI contexts. An attacker could cause arbitrary code execution by supplying a long command-line option. The description notes the impact as remote code execution...
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2002-1854
Rlaj whois CGI script whois.cgi 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field...
CVE-2002-1364
Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...
KW Whois CGI whois Parameter Arbitrary Command Execution
The version of the KW whois CGI script installed on the remote web server fails to filter input to the 'whois' parameter of shell metacharacters. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C...
Traceroute-nanog 6 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...
[sp00fed packet] Whois vulnerability
/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 1 | +----------------+--------------------------------------+-------------+ | Product: RLAJ on-line whois service | Vulnerability: command execution | Danger: high | Vendor: http://www.rlaj.com/...
CVE-1999-1063
CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...
CVE-2000-0941
The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...
CVE-2000-0941
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...
Fastgrafs whois.cgi - Remote Command Execution
Fastgrafs whois.cgi - Remote Command Execution !/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL...
Fastgraf's whois.cgi - Remote Command Execution
!/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL YES YOU HAVE CREDIT NOW ; Use like this:...
Дырка в KW Whois (unparsed shell chars)
Вызов внешней программы со строкой введенной пользователем позволяет выполнить любое приложение на сервере...
Remote command execution via KW Whois 1.0
Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...
Kootenay Web Inc whois 1.0 - Remote Command Execution
Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...
Kootenay Web Inc whois 1.0 - Remote Command Execution
source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a linux server. Due to a failure to...