PT-2000-1364 · Netwin · Netwin Dnewsweb

Published 2000-05-05 · Updated 2016-10-18 · CVE-2000-0423

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Netwin DNEWSWEB (affected versions not specified)

Description A buffer overflow issue in the Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands. This can be achieved by providing long parameters, such as group, cmd, and utag.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0423

Affected Products

Netwin Dnewsweb

References · 4

• 🔥 https://exploit-db.com/exploits/19895 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0423 · Security Note
• http://marc.info/?l=bugtraq&m=95764950403250&w=2 · Note
• http://securityfocus.com/bid/1172 · Note