VULHUB ™

Sun Microsystems Security Bulletin - AnswerBook2 below v1.4.2 ships with dwhttpd which has a vulnerability which allows a malicious user to access the administration of AnswerBook2 as well as the ability to run arbitrary commands on the remote host as the webserver user (daemon).

Sun Microsystems Security Bulletin - AnswerBook2 below v1.4.2 ships with dwhttpd which has a vulnerability which allows a malicious user to access the administration of AnswerBook2 as well as the ability to run arbitrary commands on the remote host as the webserver user (daemon).