Infoseek Ultraseek搜索引擎缓冲区溢出漏洞-安全小百科

Infoseek Ultraseek搜索引擎缓冲区溢出漏洞

漏洞ID	1105644	漏洞类型	缓冲区溢出
发布时间	1999-12-15	更新时间	2005-05-02
CVE编号	CVE-1999-0996	CNNVD-ID	CNNVD-199912-051
漏洞平台	Windows	CVSS评分	7.5

|漏洞来源

https://www.exploit-db.com/exploits/19679
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199912-051

|漏洞详情

InfoseekUltraseek搜索引擎存在缓冲区溢出漏洞。远程攻击者可以借助一个长GET请求执行命令。

|漏洞EXP

source: http://www.securityfocus.com/bid/874/info

Infoseek's Ultraseek enterprise search server listens on port 8765 by default for HTTP commands. The code that handles GET commands has an unchecked buffer that will allow arbitrary code to be executed if it is overflowed.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19679-1.zip

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/19679-2.zip

|参考资料

来源:OSVDB
名称:6490
链接:http://www.osvdb.org/6490
来源:EEYE
名称:AD19991215
链接:http://www.eeye.com/html/Research/Advisories/AD19991215.html

相关推荐: Aladdin Knowledge Systems eToken PIN Extraction Vulnerability

Aladdin Knowledge Systems eToken PIN Extraction Vulnerability 漏洞ID 1104142 漏洞类型 Design Error 发布时间 2000-05-04 更新时间 2000-05-04 CVE编号…

文章版权归作者所有，未经允许请勿转载。

THE END