Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/2492 | Exploit Vendor Advisory |
http://www.aspseek.org/changes.html | Patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/6248 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-06-26 21:00
Updated : 2017-12-18 18:29
NVD link : CVE-2001-0476
Mitre link : CVE-2001-0476
JSON object : View
CWE
Products Affected
swsoft
- aspseek