Scheduled Jobs on AIX 4.x platforms. Local users can exploit this vulnerability and gain root privileges.
People use it to keep track of how many hits their web pages have received, etc.
It contains a buffer overflow that can allow remote http users to execute commands on the system running count.cgi. The author has released a patch and the problem has been corrected in the upcoming release of count.cgi 2.4. A patch is available to correct the vulnerable Internet Explorer version. The smurf denial of service attack is being widely used because of the exploit program being available on the Internet. All of these hosts then reply to the victim with ICMP echo replies.