漏洞信息详情

phf远程命令执行漏洞

• CNNVD编号：CNNVD-199603-002
• 危害等级： 超危
  
• CVE编号： CVE-1999-0067
• 漏洞类型： 输入验证
• 发布时间： 1996-03-20
• 威胁类型： 远程
• 更新时间： 2007-02-08
• 厂        商： apache
• 漏洞来源： This bug was first...

漏洞简介

phf CGI程序存在漏洞。该漏洞通过shell元字符执行远程命令。

漏洞公告

This cgi-bin call, along with any others that are unused, should be removed. A patched version of the escape_shell_cmd() function is available as part of later httpd distributions. This can be obtained at: http://hoohoo.ncsa.uiuc.edu/beta-1.5 Apache should be upgraded immediately.

参考网址

来源:CERT/CC Advisory: CA-1996-06 名称: CA-1996-06 链接:http://www.cert.org/advisories/CA-1996-06.HTML 来源: BID 名称: 629 链接:http://www.securityfocus.com/bid/629 来源: OSVDB 名称: 136 链接:http://www.osvdb.org/136

受影响实体

• Apache Http_server:1.0.3  

补丁

暂无