Title: AHG Search Engine Search.CGI Arbitrary Command Execution Vulnerability
Severity: HIGH
Description:
Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms.
A problem with the script could make it possible for a remote user to execute arbitrary commands. The problem is in the filtering of input.
The search.cgi script included with the AHG Search Engine does not adequately filter input. Due to lack of sufficient input sanitization, it is possible for a remote user to pass semi-colon (;) and pipe (|) characters through a search request. This can result in the commands encapsulated between the symbols being executed with the privileges of the web server.
This problem makes it possible for a remote user to execute arbitrary commands on a vulnerable system. On UNIX systems, this would likely be as an unprivileged user. On Microsoft systems, these commands may be executed with SYSTEM privileges.
Affected Products:
- AHG HTMLsearch 1.0.0
References:
- AHG: Search Engines
- SecuriTeam: Bug in AHG Search Engines Leads to Code Execution
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
