PT-2000-1269 · Bizdb · Bizdb

Published 2000-04-12 · Updated 2008-09-10 · CVE-2000-0287

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BizDB (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands by injecting shell metacharacters into the dbname parameter of the bizdb-search.cgi script.

Recommendations For all affected versions, avoid using the dbname parameter in the bizdb-search.cgi script until a fix is available. As a temporary workaround, consider restricting access to the bizdb-search.cgi script to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0287

Affected Products

Bizdb

References · 4

• 🔥 http://securityfocus.com/bid/1104 · Exploit
• 🔥 https://exploit-db.com/exploits/19844 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0287 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html · Note