medium5.0Public exploit code
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetWin DNews 5.3 Server - Remote Buffer Overflow2000-03-01 · remote · windows · Verified
Impact
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netwin | Dnews | Version 5.3 |