451 matches found
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2003-0709: Undefined Security Weakness
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2002-1854
Rlaj whois CGI script whois.cgi 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field...
CVE-2002-1364
Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...
KW Whois CGI whois Parameter Arbitrary Command Execution
The version of the KW whois CGI script installed on the remote web server fails to filter input to the 'whois' parameter of shell metacharacters. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C...
Traceroute-nanog 6 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...
[sp00fed packet] Whois vulnerability
/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 1 | +----------------+--------------------------------------+-------------+ | Product: RLAJ on-line whois service | Vulnerability: command execution | Danger: high | Vendor: http://www.rlaj.com/...
CVE-1999-1063
CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...
CVE-2000-0941
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...
CVE-2000-0941
The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...
Fastgraf's whois.cgi - Remote Command Execution
!/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL YES YOU HAVE CREDIT NOW ; Use like this:...
Fastgrafs whois.cgi - Remote Command Execution
Fastgrafs whois.cgi - Remote Command Execution !/usr/bin/perl whois.pl - Marco van Berkum - [email protected] homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi DO NOT EDIT THIS HEADER, else the bedbugs will bite Greets to sigmo for finding stupid POST examples Also greetings to DUCKEL...
CVE-2000-0941: Undefined Security Weakness
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...
Дырка в KW Whois (unparsed shell chars)
Вызов внешней программы со строкой введенной пользователем позволяет выполнить любое приложение на сервере...
Remote command execution via KW Whois 1.0
Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...
Kootenay Web Inc whois 1.0 - Remote Command Execution
source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a linux server. Due to a failure to...
Kootenay Web Inc whois 1.0 - Remote Command Execution
Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...
CVE-2000-0509: Undefined Security Weakness
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname...