Path traversal

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

PT-2019-9367

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A path traversal issue exists in the NCBI ToolBox, potentially allowing the reading of arbitrary files or file deletion. This is achieved via the nph-viewgif.cgi query string...

CVE-2018-16717: Out-of-bounds Write

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16716: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

PT-2019-9368

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A heap-based buffer overflow issue exists in the nph-viewgif.cgi component. Recommendations For versions 2.0.7 through 2.2.26, consider disabling the nph-viewgif.cgi component until a patc...