CVE-2004-0448

The CVE-2004-0448 entry describes a format-string vulnerability in the log function of jftpgw 0.13.4 and earlier. The flaw allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. Documents confirm affected software (jftpgw, an FTP proxy...

CVE-2003-0448

Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the 1 -c host file or 2 -l log file command line options...

CVE-2003-0448

Portmon 1.7 (and possibly earlier) contains a local-file-access vulnerability that allows local users to read and write arbitrary files via the command line options -c (host file) or -l (log file). The issue impacts confidentiality and integrity (partial) and requires local access; exploitation d...

CVE-2003-0448

Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the 1 -c host file or 2 -l log file command line options...

CVE-2002-0448

Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service crash via an HTTP request that contains many "C:/" sequences...

CVE-2002-0448

CVE-2002-0448 affects Xerver Free Web Server up to version 2.10, where a crafted HTTP request containing many C:/ sequences can cause the server to crash (remote DoS). The vulnerability is triggered through the HTTP request handling path and is exploitable remotely with no authentication. CVSS v2...

CVE-2002-0448

Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service crash via an HTTP request that contains many "C:/" sequences...

Xerver Web Server < 2.20 Crafted C:/ Request Remote DoS

It is possible to crash the Xerver web server by sending a long URL to its administration port. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN From Bugtraq : Date: Fri, 8 Mar 2002 18:39:39...

CVE-2001-0448

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names...

CVE-2001-0448

The CVE-2001-0448 entry concerns the Web Configuration Server in 602Pro LAN SUITE. It is exploitable by remote attackers via an HTTP GET request to the aux directory (and possibly other directories with legacy DOS device names), causing a denial of service. The cited CVSS data indicates a network...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-1999-0448

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request...

CVE-1999-0448

The CVE-1999-0448 issue affects IIS 4.0 and Apache by allowing remote control over log HTTP request methods so that the actual requested URL can be hidden. Root cause is how the log records capture the method, potentially truncating or misrepresenting the request, enabling a malicious user to con...