50 matches found
CVE-2000-0696
The CVE-2000-0696 entry concerns the dwhttpd web server’s administration interface in Solaris AnswerBook2 . The vulnerability arises because the admin interface does not properly authenticate requests to its supporting CGI scripts, enabling a remote attacker to add user accounts by directly invok...
CVE-2000-0696
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...
Дырка в Sun AnswerBook2
Непривилигированные пользователи могут получить доступ к интерфейсу администрирования, а так же выполнять программный код на сервере...
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access
source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...
Security Bulletin #00196
Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00196 Date: August 07, 2000 Cross-Ref: S21SEC-004 Title: AnswerBook2 The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the information contained in this...
Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server
ID: S21SEC-004-en Title: Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server Date: 07/08/2000 Status: Vendor contacted, Solved Scope: Remote command execution Platforms: Solaris 2.6, Solaris 8 Author: llmora Location: http://www.s21sec.com/en/avisos/s21sec-004-en.txt Release: Public S 2 1 S...
Solaris AnswerBook2 - Remote Command Execution
Solaris AnswerBook2 - Remote Command Execution source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine...
Solaris AnswerBook2 - Remote Command Execution
source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine running AnswerBook2. These commands will be execute...
CVE-1999-1417
Format string vulnerability in AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged...