vendor:
Wwwcount
by:
plaguez
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Wwwcount
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-1999-0106
CPE: a:wwwcount_project:wwwcount
Platforms Tested: Linux
1997
Wwwcount Remote Code Execution
The Wwwcount CGI program is vulnerable to a buffer overflow in the QUERY_STRING environment variable. This allows remote attackers to execute arbitrary commands with the privileges of the Wwwcount program.
Mitigation:
It is recommended to update the Wwwcount CGI program to a patched version or replace it with a more secure alternative.
