VULHUB ™

The Simple WAIS interface is an integrated interface to the WAIS system. It is designed for use on Unix and Linux operating systems. The Simple WAIS interface does not properly handle some types of input. Because of the insufficient santizing of user-supplied input, it is possible for a user with access to the interface to execute arbitrary commands with the privileges of the SWAIS daemon. This may be done by appending a command with the search, seperated by a pipe.

The Simple WAIS interface is an integrated interface to the WAIS system. It is designed for use on Unix and Linux operating systems. The Simple WAIS interface does not properly handle some types of input. Because of the insufficient santizing of user-supplied input, it is possible for a user with access to the interface to execute arbitrary commands with the privileges of the SWAIS daemon. This may be done by appending a command with the search, seperated by a pipe.