81 matches found
CVE-2003-1364
Summary: CVE-2003-1364 affects Aprelium Technologies Abyss Web Server (likely 1.1.2 and possibly older before 1.1.4). A remote attacker can cause a denial of service (server crash) by sending an HTTP GET request with empty headers in the Connection or Range fields. The OpenVAS/Nessus entries corr...
CVE-2003-1338
The CVE-2003-1338 entry documents a CRLF injection vulnerability in Aprelium Abyss Web Server
CVE-2003-1338
CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header...
CVE-2003-1337
CVE-2003-1337 affects Aprelium Abyss Web Server 1.1.2 and earlier, with a heap-based buffer overflow triggered by a long HTTP GET request that could allow remote code execution. Affected versions are supported by sources noting vulnerabilities in versions earlier than 1.1.6; remediation is upgrad...
Abyss Web Server MS-DOS Device Name DoS
It was possible to kill the web server by sending an MS-DOS device name in an HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15563; scriptversion"1.19"; scriptxrefname:"Secunia", value:"12900"; scriptnameenglish:"Abyss Web Server MS-DOS Device Name DoS"...
Abyss Web Server < 1.1.4 HTTP GET Header Remote DoS
Binary data 1475.prm...
CVE-2003-1363
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...
CVE-2003-1364
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service crash via an HTTP GET message with empty 1 Connection or 2 Range fields...
CVE-2003-1338
CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header...
CVE-2003-1337
Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
KLA10052 DoS vulnerability in Abyss Web Server
An unspecified vulnerability was found in the Abyss Web Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to unknown vectors via a specially designed GET message. Original advisories...
Abyss Web Server 1.0/1.1 - Authentication Bypass
source: https://www.securityfocus.com/bid/9171/info It has been reported that Abyss Web Server is prone to an authentication bypass vulnerability that may allow an attacker to gain access to server resources. This issue may be carried out by accessing a password protected directory under which th...
Abyss Web Server 1.01.1 - Authentication Bypass
Abyss Web Server 1.01.1 - Authentication Bypass source: https://www.securityfocus.com/bid/9171/info It has been reported that Abyss Web Server is prone to an authentication bypass vulnerability that may allow an attacker to gain access to server resources. This issue may be carried out by accessi...
Abyss Web Server GET Request Multiple Vulnerabilities
The remote Abyss Web server is earlier than version 1.1.6. Such versions are reportedly vulnerable to a buffer overflow that could be exploited by an attacker to execute arbitrary code on the host. In addition, it is possible to inject malicious data into server response headers using a specially...
[Full-Disclosure] Aprelium Abyss webserver X1 arbitrary code execution and header injection
-- Description -- Abyss Web Server is a free, closed-source, personal web server for Windows and Linux operating systems. Homepage : http://www.aprelium.com The Hackademy Audit team has found two remote security holes in Abyss Webserver X1, allowing arbitrary code execution and header injection. ...
Abyss Web Server Malformed GET Request Remote DoS
It was possible to kill the remote web server by sending empty HTTP request headers namely Connection: or Range:. An attacker may use this flaw to crash the affected application, thereby denying service to legitimate users. C Tenable Network Security, Inc. References: Date: Sat, 5 Apr 2003 12:21:...
Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service
Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service source: https://www.securityfocus.com/bid/7287/info A denial of service vulnerability has been reported for Abyss Web Server. The vulnerability exists when Abyss attempts to parse certain incomplete HTTP headers. GET / HTTP/1.0...
Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/7287/info A denial of service vulnerability has been reported for Abyss Web Server. The vulnerability exists when Abyss attempts to parse certain incomplete HTTP headers. GET / HTTP/1.0 Connection: GET / HTTP/1.0 Range:...