Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access

source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...

Solaris AnswerBook2 - Remote Command Execution

source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine running AnswerBook2. These commands will be execute...