CVE-2000-0769

O’Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe.

Date published : 2000-09-21

http://www.securityfocus.com/bid/1611

http://marc.info/?l=bugtraq&m=96715834610888&w=2