• info
• discussion
• exploit
• solution
• references

AN-HTTPd CGI Vulnerabilities

Certain versions of the AN-HTTPd server contain default CGI scripts that allow code to be executed remotely. This is due to poor sanity checking on user supplied data.