CVE-2002-1022

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges...

CVE-2002-1021

BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte...

CVE-2002-1022

CVE-2002-1022 affects BadBlue server. The vulnerability arises because passwords are stored in plaintext in the ext.ini file, enabling local and possibly remote attackers to escalate privileges. The connected documents corroborate the plaintext storage and the potential privilege gain, but do not...

CVE-2002-1023

BadBlue server allows remote attackers to cause a denial of service crash via an HTTP GET request without a URI...

CVE-2002-0800

BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end...

BadBlue Hex-encoded Null Byte Request Arbitrary File Access

The remote host is running the BadBlue web server. It was possible to read the contents of 'EXT.ini', the BadBlue configuration file, by sending a specially crafted GET request. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson Added...

BadBlue Malformed GET Request Remote DoS

By sending an invalid GET request without any URI, it iss possible to crash the remote web server. An attacker could exploit this vulnerability to make the web server crash continually. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson...

CVE-2002-0800

CVE-2002-0800 affects BadBlue 1.7.0 and permits remote directory listing by requesting a URL that ends with an encoded '%' character. The impact is partial confidentiality (I: Partial) with network access, no authentication required, and no available exploitation details in the provided documents...

CVE-2002-0800

BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end...

BadBlue 302 Status Message XSS

BadBlue 1.74 presumably earlier is susceptible to a cross-site scripting attack. When BadBlue is passed a name of a non-existant file path or an existant folder that does not end in a 0x2f character "/" it returns a 302 status code containing some text: HTTP/1.0 302 found Location: /SCRIPT/...

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently...

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access

source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently control access to the administrative interface. It is possible to remotely add the...

Three BadBlue Vulnerabilities

Advisory: Working Resources BadBlue Multiple Vulnerabilities Issue: Three vulnerabilities; a denial of service, an insecurity in password storage, and a file disclosure vulnerability that could allow viewing of the password file. Risk: Critical SecurityFocus: "Working Resources BadBlue Invalid Ge...

MFC ISAPI Framework Buffer Overflow

Systems Affected: All ISAs written using MFC ISAPI framework Issue: User-input length values can result in a buffer overflow. Risk: Critical Scope: Remote Server Compromise The MFC ISAPI framework is widely used to build ISAs that run on a multitude of web servers. It has been discovered that the...

Technical Details of BadBlue EXT.DLL Vulnerability

Several days ago, I reported a vulnerability in the EXT.DLL ISAPI of BadBlue. BadBlue 1.7.3 has now been released by the vendor Working Resources at http://www.badblue.com/down.htm for administrators to upgrade their systems. The vulnerability exists in how EXT.DLL sanitizes input for HTX/HTS...

Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting

Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...

Working Resources BadBlue 1.7.3 - GET Denial of Service

source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests that do not adhere to RFC standards. When a user connects ...

Working Resources BadBlue 1.7.3 - 'cleanSearchString()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web interface, generated by an included web server running on the local...

Working Resources BadBlue 1.7.3 - GET Denial of Service

Working Resources BadBlue 1.7.3 - GET Denial of Service source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests th...

badexploit.txt

!/usr/bin/perl - ElectronicSouls Private Do Not Distrobute - Remote Exploit For BadBlue 1.5 Web Server www.badblue.com A transversal bug has been discovered in BadBlue HTTP Daemon SoftWare. This is a gay bug, yes I know. But it can be kinda funny for those days you are bored = Vulnerable System:...