CVE-2001-0394

The CVE-2001-0394 entry concerns Website Pro 3.0.37 where the Remote manager service is vulnerable to a denial-of-service via a sequence of malformed HTTP requests to the /dyn directory. The NVD entry lists a CVSS2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no a...

CVE-1999-1180

CVE-1999-1180 affects O'Reilly WebSite 1.1e and Website Pro 2.0. The CGI scripts args.bat/args.cmd are vulnerable to remote arbitrary command execution via shell metacharacters in arguments. The NASL entry notes a known exploit path and states there is no known solution at this time; no additiona...

CVE-2000-0769

The CVE-2000-0769 entry concerns O'Reilly WebSite Pro 2.3.7 where uploader.exe is installed with execute permissions for all users, enabling remote attackers to create and execute arbitrary files by directly calling uploader.exe. This describes a direct misuse of file permissions leading to arbit...