45 matches found
CVE-1999-1180: Undefined Security Weakness
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to 1 args.cmd or 2 args.bat...
Javascript в O'Reilly WebBoard (javascript execution)
Можно вставить javascript в pager-message...
OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript
source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allow a remote denial of service against a target WebBoard user's...
CVE-2000-0622
CVE-2000-0622 : Buffer overflow in the Webfind CGI script of O'Reilly WebSite Professional WebServer 2.x (webfind.exe) when processing a too-long keywords parameter. This allows remote attackers to execute arbitrary commands on the affected host; some references describe the impact as potentially...
CVE-2000-0622
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...
CVE-2000-0622: Undefined Security Weakness
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...
OReilly Software WebSite Professional 2.5.4 - Path Disclosure
OReilly Software WebSite Professional 2.5.4 - Path Disclosure source: https://www.securityfocus.com/bid/2488/info Requesting a specially crafted URL to a machine running O'Reilly & Associates Website Professional, will disclose the physical path to the root directory. www.example.com/:/...
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0769
The CVE-2000-0769 entry concerns O'Reilly WebSite Pro 2.3.7 where uploader.exe is installed with execute permissions for all users, enabling remote attackers to create and execute arbitrary files by directly calling uploader.exe. This describes a direct misuse of file permissions leading to arbit...
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0769: Undefined Security Weakness
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0623
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...
CVE-2000-0623
CVE-2000-0623 affects WebSitePro (WebSitePro/WebSite Professional) 2.4 and earlier. A remote attacker can cause a buffer overflow via a long HTTP GET request or Referrer header, potentially allowing arbitrary code execution. Public sources in connected documents identify this as a remote overflow...
CVE-2000-0623: Undefined Security Weakness
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...
Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717)
Cerberus Information Security Advisory CISADV000717 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 17th July 2000 Name : Website Pro GET buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : David Litchfie...
[COVERT-2000-08] O'Reilly WebSite Professional Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 19, 2000 O'Reilly WebSite Professional Overflow COVERT-2000-08 o Synopsis The indexing utility webfind.exe distributed with O'Reilly WebSite Professional contains an unchecked buffer allowing...
CVE-2000-0623
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...
OReilly Software WebSite Professional 2.3.182.42.4.9 - webfind.exe Remote Buffer Overflow
OReilly Software WebSite Professional 2.3.182.42.4.9 - webfind.exe Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1487/info O'Reilly WebSite Professional is a web server package distributed by O'Reilly & Associates. Certain versions of this web server the entire 2.X version...
WinWebserver-exploit.txt
http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...
O'Reilly WebSite uploader.exe Arbitrary File Upload
The remote web server contains a CGI script named 'uploader.exe' in '/cgi-win'. Versions of O'Reilly's Website product before 1.1g included a script with this name that allows an attacker to upload arbitrary CGI and then execute them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...