CVE-2004-1341

CVE-2004-1341: XSS in info2www prior to 1.2.2.9. Debian DSA-711-1 fixes this remote vulnerability in info2www; affected versions for woody are resolved in 1.2.2.9-20woody1 and in sid with 1.2.2.9-23. OpenVAS/DSA entries confirm the fix. No details beyond the Debian advisory are provided here.

CVE-1999-0266

The CVE-1999-0266 issue affects the info2www CGI script, which can allow remote file access or remote command execution. The vulnerability arises from insufficient input filtering of shell meta-characters in early info2www versions, enabling an attacker to run arbitrary commands with the web serv...