CVE-2001-0476 Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter...
HighCVSS 7.5
EPSS 9.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| swsoft aspseek | <= 1.0.3 | No fix listed |
| swsoft aspseek | = 1.0 | No fix listed |
References
- 20010318 Aspseek Buffer Overflow exploit mailing-list vendor-advisory
- www.aspseek.org patch
- 2492 exploit vdb-entry vendor-advisory
- aspseek-scgi-bo(6248) vdb-entry