CNCVE编号：CNCVE-20010476 CVE编号：CAN-2001-0476 安全级别：高 漏洞中文描述： Aspseek搜索引擎1.03及其早期版本中的s.cgi程序的多缓冲区溢出允许远程攻击者通过(1)一个长的HTTP请求字符串或(2)一个长的tmpl参数来执行任意命令。 漏洞英文描述： Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl paramater. 漏洞参考： Reference: BUGTRAQ:20010318 Aspseek Buffer Overflow Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html Reference: BID:2492 Reference: URL:http://www.securityfocus.com/bid/2492 Reference: CONFIRM:http://www.aspseek.org/ch 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误