CVE-2000-0697 The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
HighCVSS 10.0
EPSS 11.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris answerbook2 | = 1.3 | No fix listed |
| sun solaris answerbook2 | = 1.4 | No fix listed |
| sun solaris answerbook2 | = 1.4.1 | No fix listed |
| sun solaris answerbook2 | = 1.4.2 | No fix listed |
References
- 00196 patch vendor-advisory
- 20000807 Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server mailing-list
- solaris-answerbook2-remote-execution(5058) vdb-entry
- www.s21sec.com
- 1556 exploit patch vdb-entry vendor-advisory