CVE

Id
2273  
CVE No.
CVE-2000-0697  
Status
Candidate  
Description
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.  
Phase
Modified (20080918)  
Votes
ACCEPT(4) Baker, Cole, Dik, Levy | MODIFY(1) Frech | NOOP(2) Christey, Wall  
Comments
Frech> XF:solaris-answerbook2-remote-execution | Christey> XF:solaris-answerbook2-remote-execution | http://xforce.iss.net/static/5058.php | CHANGE> [Dik changed vote from REVIEWING to ACCEPT] | Dik> COMMENTS | verified bug existance. | Christey> There needs to be a separate item for the .. problem reported | in this same post.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
8182 2273 CVE-2000-0697 BUGTRAQ:20000807 Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server  View
8183 2273 CVE-2000-0697 URL:http://seclists.org/bugtraq/2000/Aug/0105.html  View
8184 2273 CVE-2000-0697 MISC:http://www.s21sec.com/en/avisos/s21sec-004-en.txt  View
8185 2273 CVE-2000-0697 SUN:00196  View
8186 2273 CVE-2000-0697 URL:http://archives.neohapsis.com/archives/sun/2000-q3/0001.html  View
8187 2273 CVE-2000-0697 XF:solaris-answerbook2-remote-execution(5058)  View
8188 2273 CVE-2000-0697 URL:http://www.iss.net/security_center/static/5058.php  View
8189 2273 CVE-2000-0697 BID:1556  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64275 JVNDB-2000-000055 Sun Solaris の AnswerBook2 における任意のコマンドを実行される脆弱性 Sun Solaris の AnswerBook2 には、管理用の Web サーバとして提供されている dwhttpd において、管理用 CGI スクリプト /cgi-bin/admin/admin へWeb ブラウザから直接アクセス可能であり、且つ CGI スクリプトの引数としてシステム内のコマンドを指定して実行可能である脆弱性が存在します。 CVE-2000-0697 2273 10 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000055.html  View