Vulnerabilities > CVE-2005-2812 - Unspecified vulnerability in Man2Web 0.87/0.88

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
man2web
nessus
exploit available

Summary

man2web allows remote attackers to execute arbitrary commands via -P arguments.

Vulnerable Configurations

Part Description Count
Application
Man2Web
2

Exploit-Db

descriptionman2web <= 0.88 Multiple Remote Command Execution Exploit (update2). CVE-2005-2812. Webapps exploit for cgi platform
idEDB-ID:1194
last seen2016-01-31
modified2005-09-04
published2005-09-04
reportertracewar
sourcehttps://www.exploit-db.com/download/1194/
titleman2web <= 0.88 - Multiple Remote Command Execution Exploit update2

Nessus

NASL familyCGI abuses
NASL idMAN2WEB_CMD_EXEC.NASL
descriptionThe remote host appears to be running man2web, a program for dynamically converting unix man pages to HTML. The installed version of man2web allows attackers to execute arbitrary shell commands on the remote host subject to the privileges of the web server user id.
last seen2020-06-01
modified2020-06-02
plugin id19591
published2005-09-07
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/19591
titleman2web Multiple Scripts Arbitrary Command Execution