Traceroute-nanog 6 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...

[sp00fed packet] Whois vulnerability

/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 1 | +----------------+--------------------------------------+-------------+ | Product: RLAJ on-line whois service | Vulnerability: command execution | Danger: high | Vendor: http://www.rlaj.com/...

CVE-1999-1063

CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...

CVE-2000-0941

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...

CVE-2000-0941

The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...

Fastgrafs whois.cgi - Remote Command Execution

Fastgrafs whois.cgi - Remote Command Execution !/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL...

Fastgraf's whois.cgi - Remote Command Execution

!/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL YES YOU HAVE CREDIT NOW ; Use like this:...

Remote command execution via KW Whois 1.0

Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...

Дырка в KW Whois (unparsed shell chars)

Вызов внешней программы со строкой введенной пользователем позволяет выполнить любое приложение на сервере...

Kootenay Web Inc whois 1.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a linux server. Due to a failure to...

Kootenay Web Inc whois 1.0 - Remote Command Execution

Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...

CVE-2000-0010

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter...

CVE-1999-0983

The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...

CVE-1999-0983

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0985

CVE-1999-0985 affects the CC Whois program. The vulnerability arises in the whois.cgi entry for a domain, where remote attackers can cause command execution by injecting shell metacharacters. The available documents describe the issue but do not specify affected versions or provide an official fi...

CVE-1999-0985

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0984

Matt's Whois program whois.cgi is vulnerable to remote command execution via shell metacharacters in the domain field. The root cause is unsanitized input in the domain entry. Affected: Matt's Whois program whois.cgi (versions not specified). Impact: arbitrary commands executed on the server. Exp...

CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

PT-1999-1819 · Webwho+ · Webwho+

Name of the Vulnerable Software and Affected Versions: WebWho+ versions affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the TLD parameter of the whois.cgi program. Recommendations: At the moment, there is no informatio...

hhp-whois_adv0013.txt

hhp Whois.CGI - ADVISORY. hhp hhp-ADV12 11/9/99 8:42:57pm CST By: loophole [email protected] - http://hhp.perlx.com What?: Hole in several known/unknown Whois CGI packages. Versions?: 1. Whois Internic Lookup - version: 1.0 2. CC Whois - Version: 1.0 3. Matt's Whois - Version: 1 Exploit!: These...