1523 matches found
Дырки в Alibaba
Стандартный CGI-Скрипт позволяет выполнение любых приложений...
Multiple bugs in Alibaba 2.0
Application: Alibaba 2.0 Problem Type: Multiple Problems3 Author: [email protected] Platforms: Windows 95/98/NT Vendor Status: Not Informed Vendor Website: http://csm.alcyonis.fr Product Description ------------------- Alibaba is a fully functional http server for windows 95/98/NT. It...
CVE-2000-0626
Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request...
Computer Software Manufaktur Alibaba 2.0 - Piped Command
Computer Software Manufaktur Alibaba 2.0 - Piped Command source: https://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine...
Computer Software Manufaktur Alibaba 2.0 - Denial of Service
Computer Software Manufaktur Alibaba 2.0 - Denial of Service // source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop...
Computer Software Manufaktur Alibaba 2.0 - Piped Command
source: https://www.securityfocus.com/bid/1485/info Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine. http://victim/cgi-bin/post32.exe|echo%20c:\text.txt...
Computer Software Manufaktur Alibaba 2.0 - Denial of Service
// source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop responding. A restart of the server service is required in ord...
CVE-1999-0776
The CVE-1999-0776 entry concerns the Alibaba HTTP server and a directory-traversal vulnerability that allows remote attackers to read files via a .. (dot dot) path. Affected software is Alibaba HTTP server; vulnerability type is directory traversal/ improper input handling leading to partial conf...
CVE-1999-0776
Alibaba HTTP server allows remote attackers to read files via a .. dot dot attack...
CVE-1999-0885
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL...
CVE-1999-0885
CVE-1999-0885 affects Alibaba web server and enables remote command execution via a pipe character in a malformed URL. Connected sources describe related CGI scripts (get32.exe, tst.bat) that can be exploited to run arbitrary commands with the web server’s privileges; these plugins illustrate pra...
CVE-1999-0885: Undefined Security Weakness
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL...
CVE-1999-0776: Undefined Security Weakness
Alibaba HTTP server allows remote attackers to read files via a .. dot dot attack...
CVE-1999-1444
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...
Alibaba get32.exe Arbitrary Command Execution
The 'get32.exe' CGI script is installed on this machine. This CGI has a well known security flaw that allows an attacker to execute arbitrary commands on the remote system with the privileges of the HTTP daemon typically root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Alibaba tst.bat Arbitrary Command Execution
The 'tst.bat' CGI script is installed on this machine. This CGI has a well known security flaw that would allow an attacker to read arbitrary files on the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...
CVE-1999-0885
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL...
Computer Software Manufaktur Alibaba 2.0 - Multiple CGI Vulnerabilities
Computer Software Manufaktur Alibaba 2.0 - Multiple CGI Vulnerabilities // source: https://www.securityfocus.com/bid/770/info There are several CGI programs that ship with the Alibaba webserver. Many of these do not do proper input handling, and therefore will allow requests for access to files...
Computer Software Manufaktur Alibaba 2.0 - Multiple CGI Vulnerabilities
// source: https://www.securityfocus.com/bid/770/info There are several CGI programs that ship with the Alibaba webserver. Many of these do not do proper input handling, and therefore will allow requests for access to files outside of normal or safe webserver practice. This results in various...
Alibaba Web Server 2.0 HTTP Request Overflow DoS
It is possible to make the remote web server execute arbitrary commands by sending the following request: POST AA...AA/ HTTP/1.0 This problem may allow an attacker to execute arbitrary code on the remote system or create a denial of service DoS attack. C Tenable Network Security, Inc...