210 matches found
BadBlue invalid GET DoS
It was possible to kill the web server by sending an invalid GET request without any URI SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
BadBlue invalid null byte vulnerability
It was possible to read the content of /EXT.INI BadBlue configuration file by sending an invalid GET request. A cracker may exploit this vulnerability to steal the passwords. OpenVAS Vulnerability Test $Id: badbluenullbyte.nasl 7175 2017-09-18 11:55:15Z cfischer $ Description: BadBlue invalid nul...
CVE-2004-2374
The CVE-2004-2374 entry concerns BadBlue 2.4. Affected: BadBlue 2.4. Vulnerable behavior: requesting phptest.php embeds server installation pathname in the HTML source, allowing remote disclosure of the installation path. Impact: disclosure of server location information; exact impact described i...
CVE-2004-2374
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML...
CVE-2002-1684
The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...
CVE-2002-1685
CVE-2002-1685 : BadBlue Enterprise Edition and Personal Edition versions 1.7 and 1.7.2 are affected by a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI. The flaw enables an attacker to execute arbitrary script in the context of other users by injecting script via the ext.dll ISAPI ...
CVE-2002-1683
Cross-site scripting XSS vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString function...
CVE-2002-1684
Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...
CVE-2002-1685
Cross-site scripting vulnerability XSS in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI...
CVE-2002-1683
CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...
CVE-2005-0595
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...
CVE-2005-0595
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...
CVE-2005-0595
CVE-2005-0595 is a public buffer-overflow vulnerability in BadBlue 2.55/2.5 where ext.dll overflows via a long mfcisapicommand parameter, enabling remote code execution. Public disclosures include SPL/Metasploit-era exploits (BadBlue 2.5 EXT.dll Buffer Overflow) and OSVDB/BID/CVE references; CIRC...
BadBlue ext.dll mfcisapicommand Parameter Remote Overflow
The remote host is running a version of BadBlue HTTP server that has a buffer overflow vulnerability in 'ext.dll', a module that handles HTTP requests. An unauthenticated, remote attacker can leverage this vulnerability by sending an HTTP request containing a 'mfcisapicommand' parameter with more...
BadBlue < 2.60 'GET' Request Remote Overflow
Binary data 2657.prm...
Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (2)
Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/12673/info A remote buffer overflow vulnerability affects Working Resources BadBlue. This issue is due to a failure of the application to securely copy GET request parameters int...
BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow
BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow / BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected version: v2.5 2.60 and below not tested Patched version: v2.61 Link: badblue.com/bbs98.exe Date: 27 February 2005 Application Risk: Severely High Internet Risk: Low...
BadBlue 2.5 Easy File Sharing Remote Buffer Overflow
Exploit for unknown platform in category remote exploits ==================================================== BadBlue 2.5 Easy File Sharing Remote Buffer Overflow ==================================================== / BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected...
BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow
/ BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected version: v2.5 2.60 and below not tested Patched version: v2.61 Link: badblue.com/bbs98.exe Date: 27 February 2005 Application Risk: Severely High Internet Risk: Low Dicovery Credits: Andres Tarasco atarasco at sia.es...
