Description
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe.
References
- 20000824 WebServer Pro 2.3.7 Vulnerability mailing-list
- 1611 vdb-entry