CVE-2001-0476

Опубликовано: 27 июн. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html
Exploit
Vendor Advisory
http://www.aspseek.org/changes.html
Patch
http://www.securityfocus.com/bid/2492
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6248
http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html
Exploit
Vendor Advisory
http://www.aspseek.org/changes.html
Patch
http://www.securityfocus.com/bid/2492
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6248

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:swsoft:aspseek:*:*:*:*:*:*:*:*

Версия до 1.0.3 (включая)

cpe:2.3:a:swsoft:aspseek:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05298

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-x95q-59mj-wfrx

github

почти 4 года назад