CVE-2000-0697

Description

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.

Affected products

• sun / solaris_answerbook21.3 – 1.3
• sun / solaris_answerbook21.4 – 1.4
• sun / solaris_answerbook21.4.1 – 1.4.1
• sun / solaris_answerbook21.4.2 – 1.4.2

References

• MISChttp://www.iss.net/security_center/static/5058.php
• MISChttp://www.s21sec.com/en/avisos/s21sec-004-en.txt
• MISChttp://www.securityfocus.com/bid/1556
• MISChttp://archives.neohapsis.com/archives/sun/2000-q3/0001.html
• MAILING_LISThttp://seclists.org/bugtraq/2000/Aug/0105.html