CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0985

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0983

The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...

CVE-1999-0984

Matt's Whois program whois.cgi is vulnerable to remote command execution via shell metacharacters in the domain field. The root cause is unsanitized input in the domain entry. Affected: Matt's Whois program whois.cgi (versions not specified). Impact: arbitrary commands executed on the server. Exp...

CVE-1999-0985

CVE-1999-0985 affects the CC Whois program. The vulnerability arises in the whois.cgi entry for a domain, where remote attackers can cause command execution by injecting shell metacharacters. The available documents describe the issue but do not specify affected versions or provide an official fi...

PT-1999-1819 · Webwho+ · Webwho+

Name of the Vulnerable Software and Affected Versions: WebWho+ versions affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the TLD parameter of the whois.cgi program. Recommendations: At the moment, there is no informatio...

hhp-whois_adv0013.txt

hhp Whois.CGI - ADVISORY. hhp hhp-ADV12 11/9/99 8:42:57pm CST By: loophole [email protected] - http://hhp.perlx.com What?: Hole in several known/unknown Whois CGI packages. Versions?: 1. Whois Internic Lookup - version: 1.0 2. CC Whois - Version: 1.0 3. Matt's Whois - Version: 1 Exploit!: These...

CVE-1999-0983

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

CVE-1999-0985

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

PT-1999-1505 · Cc · Cc Whois

Name of the Vulnerable Software and Affected Versions: CC Whois program affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. This can be done by injecting malicious input into the domain field, potentially...

PT-1999-1503 · Internic · Whois Internic Lookup

Name of the Vulnerable Software and Affected Versions: Whois Internic Lookup program affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. This can be exploited by injecting malicious input into the domain...

CVE-1999-1063

CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...

Ipswitch IMail 5.0 - Whois32 Daemon Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/506/info IMail's whois server can be crashed due to an unchecked buffer. Telnet to target machine, port 43 Send glob1 Where glob1 is 1000 characters...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...