O’Reilly WebSite GET缓冲区溢出漏洞

漏洞信息详情

O’Reilly WebSite GET缓冲区溢出漏洞

• CNNVD编号：CNNVD-200007-042
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2000-0623
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-07-17
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-09-22
  
• 厂        商：
  
  oreilly
• 漏洞来源：
  Disclosed in an ad…

O\’\’Reilly WebSite Professional web server 2.4版本及之前版本存在缓冲区溢出漏洞。远程攻击者可以借助超长GET请求或Referrer标题来执行任意命令。

Upgrade to version 2.5 of the software.
OReilly Software WebSite Professional 2.3.18

• O’Reilly & Associates WebSite 2.5
  
  http://website.oreilly.com/support/software/wsp2x_updates.cfm

OReilly Software WebSite Professional 2.4

• O’Reilly & Associates WebSite 2.5
  
  http://website.oreilly.com/support/software/wsp2x_updates.cfm

OReilly Software WebSite Professional 2.4.9

• O’Reilly & Associates WebSite 2.5
  
  http://website.oreilly.com/support/software/wsp2x_updates.cfm

来源: BID
名称: 1492
链接:http://www.securityfocus.com/bid/1492

来源: NTBUGTRAQ
名称: 20000719 Alert: Buffer Overrun is O’Reilly WebsitePro httpd32.exe (CISADV000717)
链接:http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946