CVE-2005-0548

Sun AnswerBook2 (Solaris)

CVE-2005-0548

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2005-0549

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...

CVE-2005-0549

CVE-2005-0549 is a cross-site scripting (XSS) vulnerability in Sun/ Solaris AnswerBook2 Documentation 1.4.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the View Log Files function. Affected software is explicitly Sun AnswerBook2 documentation prior to...

Sun AnswerBook2 < 1.4.5 XSS

Binary data 2678.prm...

CVE-2005-0548

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2002-2425

Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as 1 AdminViewError and 2 AdminAddadmin via a direct request...

Sun AnswerBook2 format string and other vulnerabilities

------------------------------------------------------------------------ DynaWeb httpd Format String and AnswerBook 2 Unauthenticated Admin Script Execution Vulnerabilities Release Date: August 1, 2002 Application: Solaris ab2 1.4.2 / dwhttpd 4.1a6 with patch 110011-02 and before Severity: Remote...

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface...

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access

source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface. Reportedly, it is possible to access these scripts without...

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...

CVE-2002-0360

The CVE-2002-0360 issue affects Sun AnswerBook2 1.4–1.4.3, where a buffer overflow in the gettransbitmap CGI allows a remote attacker to execute arbitrary code via a long filename argument. Impact is remote code execution with the daemon privileges; no exploit details are provided in the document...

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...

eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability

eSO Security Advisory: 5063 Discovery Date: March 1, 2002 ID: eSO:5063 Title: Sun AnswerBook2 gettransbitmap buffer overflow vulnerability Impact: Remote attackers can execute arbitrary code. Affected Technology: Sun AnswerBook2 1.4, 1.4.1, 1.4.2, 1.4.3 Vendor Status: Vendor notified. Discovered...

CVE-1999-1416

CVE-1999-1416 affects the AnswerBook2 (AB2) web server dwhttpd 3.1a4. A remote attacker can trigger a denial of service by sending an HTTP POST with a large Content-Length, exhausting resources. No exploitation details or patches are provided in the connected documents.

CVE-1999-1416

AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service resource exhaustion via an HTTP POST request with a large content-length...

CVE-1999-1417

Format string vulnerability in AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged...

Denial of Service Vulnerability in Sun AnswerBook2

Topic: Denial of Service Vulnerability in Sun AnswerBook2 Date: 10/24/2000 Status: Vendor Contacted 10/10/2000, Currently unsolved Scope: Local and Remote Denial of Service Platforms: SunOS 5.6, Presumably any running AnswerBook2 Authors: Dave Monnier, Dick Repasky Unix Workstation Support Group...

CVE-2000-0696

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...

CVE-2000-0697

The connected Nessus entry identifies a concrete vulnerability: Sun AnswerBook2 Web Server dwhttpd is vulnerable to a GET request remote format string attack. Affected versions include dwhttp/4.0.2a7a and dwhttpd/4.1a6. Successful exploitation can crash the server or allow arbitrary code executio...