CVE-2000-0622

Published: Jul 19, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter.

Affected (3)

Products: Oreilly: Website Professional

Oreilly

1 product

Website Professional

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oreilly Website Professional	Version 2.3.18
Oreilly Website Professional	Version 2.4.9
Oreilly Website Professional	Version 2.4

References (8)

http://website.oreilly.com/support/software/wspro25_releasenotes.txt

Source: cve@mitre.org

http://www.nai.com/research/covert/advisories/043.asp

Source: cve@mitre.org

http://www.securityfocus.com/bid/1487

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/4962

Source: cve@mitre.org

http://website.oreilly.com/support/software/wspro25_releasenotes.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nai.com/research/covert/advisories/043.asp

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1487

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/4962

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.