169 matches found
CVE-2007-3009
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2007-3008
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
CVE-2007-3008
CVE-2007-3008 affects Mbedthis AppWeb prior to 2.2.2. The vulnerability is that HTTP TRACE is enabled, which can lead to information leakage and cross-site tracing (XST) concerns. This entry is corroborated by related advisories in the connected documents, which note the TRACE method as the root ...
CVE-2007-3009
The CVE-2007-3009 case concerns Mbedthis AppWeb 2.0.5-4, where a Format string vulnerability in MprLogToFile::logEvent can be triggered when logging is supported but disabled in configuration. The issue allows remote attackers to crash the daemon (DoS) by crafting HTTP scheme format specifiers, d...
CVE-2007-3008
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
CVE-2007-3009
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2007-3008: Improper Neutralization of Input During Web Page Generation
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
CVE-2007-3009: Undefined Security Weakness
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2004-2316
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...
CVE-2004-2317
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access...
CVE-2004-2316
CVE-2004-2316 affects the Mbedthis AppWeb HTTP server prior to 1.0.2. A remote attacker can crash the server by sending a GET request that contains an MS-DOS device name (e.g., COM1). The available sources confirm the vulnerable software/version and the crash-based impact; no exploit details or c...
CVE-2004-2315
The vulnerability CVE-2004-2315 affects Mbedthis AppWeb HTTP server prior to version 1.0.2, where a remote attacker can cause a denial of service (crash) by sending an empty OPTIONS request. The provided documents state the issue and affected version but do not include exploit details, root-cause...
CVE-2004-2317
Technical details for CVE-2004-2317 are not publicly available in the provided documents. No concrete information on affected products, versions, root cause, or impact is present. Monitor for updates from credible sources.
CVE-2004-2315
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...
CVE-2004-2317: Undefined Security Weakness
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access...
CVE-2004-2315: Undefined Security Weakness
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...
CVE-2004-2316: Undefined Security Weakness
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...
CVE-2004-2213
CVE-2004-2213 affects the Mbedthis AppWeb HTTP server prior to 1.1.3. An HTTP request containing a trailing dot "." or trailing space can disclose the server-side source code of scripts to a remote attacker. The description indicates the vulnerability path is via crafted requests, enabling partia...
CVE-2004-2214
The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...