CVE-2013-1946

The CVE-2013-1946 entry affects Drupal’s RESTful Web Services (RESTWS) module for Drupal 7.x-1.x up to 7.x-1.3 and 7.x-2.x up to 7.x-2.0-alpha5. When page caching is enabled and anonymous users have RESTWS permissions, a GET request with an HTTP Accept header set to a non-HTML type can cause a de...

CVE-2013-1946

The RESTful Web Services RESTWS module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a...

CVE-2013-1946: Improper Input Validation

The RESTful Web Services RESTWS module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a...

PT-2014-2521

Name of the Vulnerable Software and Affected Versions Drupal RESTful Web Services RESTWS module versions 7.x-1.x before 7.x-1.3 Drupal RESTful Web Services RESTWS module versions 7.x-2.x before 7.x-2.0-alpha5 Description The issue allows remote attackers to cause a denial of service via a GET...

Moderate: Red Hat Security Advisory: rhevm security and bug fix update

Updated rhevm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the...

CVE-2005-3182: Undefined Security Weakness

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as 1 Host and 2 Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could me...

CVE-2000-0299: Undefined Security Weakness

Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept...

Netscape Enterprise Server Accept Header Remote Overflow

The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...