Signature Detail
Short Name |
HTTP:CGI:INFOSRCH-REMOTE-EXEC |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
IRIX InfoSearch fname Remote Execution |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: IRIX InfoSearch fname Remote Execution
This signature detects attempts to exploit a known vulnerability in the infosrch.cgi script. Attackers can execute commands on the Web server.
Extended Description
The InfoSearch package converts man pages and other documentation into HTML web content. The search form uses infosrch.cgi which does not properly parse user input in the 'fname' variable, allowing commands to be executed at the webserver privilege level by remote web users.
Affected Products
- SGI InfoSearch 1.0.0
- SGI IRIX 6.5.0
- SGI IRIX 6.5.1
- SGI IRIX 6.5.2 m
- SGI IRIX 6.5.3
- SGI IRIX 6.5.3 f
- SGI IRIX 6.5.3 m
- SGI IRIX 6.5.4
- SGI IRIX 6.5.6
- SGI IRIX 6.5.7
References
- BugTraq: 1031
- CVE: CVE-2000-0207