4 matches found
CVE-1999-0885
CVE-1999-0885 affects Alibaba web server and enables remote command execution via a pipe character in a malformed URL. Connected sources describe related CGI scripts (get32.exe, tst.bat) that can be exploited to run arbitrary commands with the web server’s privileges; these plugins illustrate pra...
CVE-1999-0776
The CVE-1999-0776 entry concerns the Alibaba HTTP server and a directory-traversal vulnerability that allows remote attackers to read files via a .. (dot dot) path. Affected software is Alibaba HTTP server; vulnerability type is directory traversal/ improper input handling leading to partial conf...
CVE-1999-1444
CVE-1999-1444 affects the genkey utility in Alibaba 2.0, which generates RSA key pairs with an exponent of 1. The underlying issue is the weak exponent, enabling transactions to be sent in cleartext. The connected documents confirm the vulnerability scope but do not provide a published exploit, a...
CVE-2000-0626
Alibaba Web Server 2.0 is affected by a buffer overflow in HTTP request handling (notably via long GET/POST requests), enabling remote attackers to cause denial of service. The NASL entry additionally indicates potential arbitrary code execution through crafted requests, suggesting a broader impa...