210 matches found
BadBlue 2.52 Web Server Multiple Connections Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== BadBlue 2.52 Web Server Multiple Connections Denial of Service Exploit ====================================================================== !/usr/bin/perl BadBlue v2.52 Web...
00042-08202004.txt
GulfTech Security Research August, 18th 2004 Vendor : BadBlue URL : http://www.badblue.com Version : BadBlue Webserver v2.5 Risk : Denial of Service Description: Share photos, videos, music, and business files with friends and colleagues instantly. Tired of paying a service to share your files an...
BadBlue Connection Saturation Remote DoS
According to its banner, the remote BadBlue web server has a bug which may allow attackers to prevent it from serving pages properly. It is possible to disable the remote BadBlue server by issuing approximately 24 concurrent connections to the remote host. An attacker may exploit this flaw by...
CVE-2004-1727
BadBlue 2.5 allows remote attackers to cause a denial of service refuse HTTP connections via a large number of connections from the same IP address...
BadBlue Webserver Connection Saturation Remote DoS
Binary data 2127.prm...
BadBlue < 2.3 ISAPI Extension Administrative Actions Bypass
Binary data 1500.prm...
BadBlue < 2.2 Unspecified Admin Access (deprecated)
Binary data 1554.prm...
Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure
Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a...
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...
CVE-2003-0332
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension...
badblue052003.txt
BadBlue Remote Administrative Access Vulnerability I. Synopsis Affected Systems: BadBlue 1.7 BadBlue 2.0 BadBlue 2.1 BadBlue 2.2 Immune Systems: BadBlue 2.3 NOTE: BadBlue 1.6 and prior may be impacted; these systems were not tested. Risk: High Remote LocalSystem Compromise Vendor URL:...
CVE-2003-0332
The CVE-2003-0332 vulnerability affects BadBlue ISAPI extension in versions 1.7 through 2.2 (potentially earlier). The issue arises when the ISAPI extension modifies the first two letters of a filename extension after a security check, allowing remote attackers to bypass authentication by using a...
CVE-2003-0332
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension...
BadBlue Remote Administrative Interface Access Vulnerability
BadBlue Remote Administrative Access Vulnerability I. Synopsis Affected Systems: BadBlue 1.7 BadBlue 2.0 BadBlue 2.1 BadBlue 2.2 Immune Systems: BadBlue 2.3 NOTE: BadBlue 1.6 and prior may be impacted; these systems were not tested. Risk: High Remote LocalSystem Compromise Vendor URL:...
BadBlue ISAPI Extension ext.dll LoadPage Parameter Arbitrary File Access
The remote host is running BadBlue web server earlier then 2.3. Such versions are reportedly affected by an authentication bypass vulnerability. A flaw in the order that security checks are performed could allow an attacker to gain administrative access to the application. C Tenable Network...
Working Resources BadBlue 1.7.x/2.x - Unauthorized HTS Access
source: https://www.securityfocus.com/bid/7638/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access to administrative functions. It is possible to bypass BadBlue security checks when '.hts' files are requested by a remote user. BadBlue restricts...
Working Resources BadBlue 1.7.x2.x - Unauthorized HTS Access
Working Resources BadBlue 1.7.x2.x - Unauthorized HTS Access source: https://www.securityfocus.com/bid/7638/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access to administrative functions. It is possible to bypass BadBlue security checks when...
BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass
The remote host is running the BadBlue web server earlier than 2.2. Such versions are reportedly affected by an authentication bypass vulnerability. It is possible for an attacker to gain administrative access using a filename with a .ats extension instead of a .hts extension. C Tenable Network...
badblue.txt
BadBlue Arbitrary Administrative Actions Vulnerability I. Synopsis Author: Matthew Murphy [email protected] Release Date: April 20, 2003 Vendor References: http://www.badblue.com http://www.badblue.com/down.htm Affected Systems: BadBlue 2.15 and prior Risk: High Issue: A vulnerability enabling...