myServer 0.6.2 – ‘math_sum.mscgi’ Multiple Remote Overflows

21次阅读
没有评论

myServer 0.6.2 – ‘math_sum.mscgi’ Multiple Remote Overflows

漏洞ID 1054546 漏洞类型
发布时间 2004-07-30 更新时间 2004-07-30
myServer 0.6.2 - 'math_sum.mscgi' Multiple Remote OverflowsCVE编号 N/A
myServer 0.6.2 - 'math_sum.mscgi' Multiple Remote OverflowsCNNVD-ID N/A
漏洞平台 CGI CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/24337
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/10831/info
 
Reportedly MyServer is affected by multiple remote vulnerabilities in the 'math_sum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI input.
 
An attacker could exploit the boundary condition issue to execute arbitrary code on the affected computer with the privileges of the user that started the affected application. The input validation issue could be leveraged to carry out cross-site scripting attacks against the affected computer.
 
These issues are reported to affect MyServer version 0.6.2, it is likely other versions are also affected.

http://www.example.com/cgi-bin/math_sum.mscgi?a=[AAA...x86...AAA]

相关推荐: Auerswald COMsuite CTI应用程序弱默认密码漏洞

Auerswald COMsuite CTI应用程序弱默认密码漏洞 漏洞ID 1202212 漏洞类型 配置错误 发布时间 2003-12-31 更新时间 2003-12-31 CVE编号 CVE-2003-1457 CNNVD-ID CNNVD-200312…

正文完
 0