CVE-2000-0623 Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oreilly website professional | = 2.3.18 | No fix listed |
| oreilly website professional | = 2.4 | No fix listed |
| oreilly website professional | = 2.4.9 | No fix listed |
References
- 20000719 Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717) mailing-list patch vendor-advisory
- 1492 exploit patch vdb-entry vendor-advisory