CVE-2001-0633

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...

CVE-2001-0633

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...

CVE-2001-0633

The CVE-2001-0633 issue affects Sun Chili!Soft ASP on multiple Unix platforms. The vulnerability is a directory traversal in the sample script codebrws.asp, allowing a remote attacker to read arbitrary files above the web root by using a .. path traversal. The description does not specify affecte...

CVE-2001-0633: Undefined Security Weakness

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...

nerf.iis.dos.txt

--== NERF gr0up security advisory 4 ==-- MS IIS local and remote DoS 1. Vulnerable soft: IIS 4,5 2. Description: Openning and reading of device files com1, com2, etc. using Scripting.FileSystemObject will crash ASP-processor asp.dll. 3. Local exploit: If you have permission on creating .asp-file,...

NERF Advisory #4: MS IIS local and remote DoS

--== NERF gr0up security advisory 4 ==-- MS IIS local and remote DoS 1. Vulnerable soft: IIS 4,5 2. Description: Openning and reading of device files com1, com2, etc. using Scripting.FileSystemObject will crash ASP-processor asp.dll. 3. Local exploit: If you have permission on creating .asp-file,...

DoS против обработчика ASP в IIS (ASP special device name DoS)

При обращении из ASP к специальному объекту файловой системы проводит к зависанию обработчика ASP...

Microsoft IIS 4.0/5.0 - Device File Local Denial of Service

source: https://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. The local attacker must of course possess the privileges...

Microsoft IIS 4.05.0 - Device File Local Denial of Service

Microsoft IIS 4.05.0 - Device File Local Denial of Service source: https://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. Th...

CVE-2001-1248

vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character %20...

LinkMax.txt

---------------------------------------------------------- Release date: May 21th 2001 Subject: WebAvail LinkMax2 ASP security problem Systems affected: All systems running LinkMax2 ASP script Vendor: http://www.webavail.com ---------------------------------------------------------- 1. problem...

CVE-2000-0302

Microsoft Index Server WebHits ISAPI filter vulnerability (MS00-06) allows remote attackers to disclose ASP source by requesting null.htw with a crafted CiWebHitsFile argument (via %20). Connected OpenVAS entries describe the WebHits component’s information disclosure and path/file reading issues...

CVE-2000-0302

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL...

CVE-2000-0302: Undefined Security Weakness

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL...

CVE-2001-0229

Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts...

CVE-2001-0229

Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts...

CVE-2001-0229

The CVE affects Chili!Soft ASP for Linux before 3.6. In inherited mode it missets group privileges, enabling local privilege escalation via malicious scripts. Impact is described as complete confidentiality, integrity, and availability losses. No explicit remediation steps are documented in the p...

CVE-2001-0229: Undefined Security Weakness

Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts...

Advisory: Chili!Soft ASP Multiple Vulnerabilities

Author: Stan Bubrouski [email protected] Date: February 20, 2001 Package: Chili!Soft ASP Versions affected: 3.5.2 and possibly previous versions. Severity: 1 A remote user could potentially view sensative information and take remote control of the server. 2 The installer installs a default usernam...