PT-2002-2572 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache versions 2.0.39 through 2.0.40 Description: The issue allows local users and possibly remote attackers to cause a denial of service, resulting in hang and memory consumption. This occurs when a CGI script sends a large amount of data t...

CGI bugs

No description provided...

CVE-2002-1361

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...

CGI bugs

No description provided...

CGI bugs

No description provided...

CGI bugs

No description provided...

Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C.

======================================== INetCop Security Advisory 2002-0x82-007 ======================================== Title: Remote Frame Pointer Overwrite vulnerability in LIB CGI in Language C. 0x01. Description A simple mode of develop CGI in language C. The libcgi package is a library...

Remote Multiple Buffer Overflow(s) vulnerability in Libcgi-tuxbr.

======================================== INetCop Security Advisory 2002-0x82-008 ======================================== Title: Remote Multiple Buffer Overflows vulnerability in Libcgi-tuxbr. 0x01. Description LIBCGI is a simple of functions to create CGI programs in C. It provides support for...

Lib CGI 0.1 - Include Buffer Overflow

Lib CGI 0.1 - Include Buffer Overflow // source: https://www.securityfocus.com/bid/6264/info Lib CGI is a freely available, open source CGI library for C programmers. It is available for Unix and Linux operating systems. It has been reported that a buffer overflow exists in the Lib CGI developmen...

Lib CGI Include Buffer Overflow Vulnerability

...

Lib CGI 0.1 - Include Buffer Overflow

// source: https://www.securityfocus.com/bid/6264/info Lib CGI is a freely available, open source CGI library for C programmers. It is available for Unix and Linux operating systems. It has been reported that a buffer overflow exists in the Lib CGI development library. Due to improper bounds...

vpopmail-CGIApps vpasswd.cgi Remote Command Execution

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow an attacker to execute any command on your system. Warning : Nessus solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem...

CGI bugs

No description provided...

liteserve.txt

Christopher Fillion's "Perception" web site hosts the LiteServe combination server for Win32. The server offers HTTP, FTP, SMTP, POP3, and Telnet services. Included in the HTTP service is a Common Gateway Interface CGI feature that allows you to specify a CGI alias, as well as "filters" that are...

Perception LiteServe HTTP CGI Disclosure Vulnerability

Christopher Fillion's "Perception" web site hosts the LiteServe combination server for Win32. The server offers HTTP, FTP, SMTP, POP3, and Telnet services. Included in the HTTP service is a Common Gateway Interface CGI feature that allows you to specify a CGI alias, as well as "filters" that are...

CGI bugs

No description provided...

Perception LiteServe 2.0 - CGI Source Disclosure

Perception LiteServe 2.0 - CGI Source Disclosure source: https://www.securityfocus.com/bid/6188/info By constructing a malicious web request, it is possible for a remote attacker to disclose the source code of CGI scripts. Information gained through exploiting this issue may aid an attacker in...

Perception LiteServe 2.0 - CGI Source Disclosure

source: https://www.securityfocus.com/bid/6188/info By constructing a malicious web request, it is possible for a remote attacker to disclose the source code of CGI scripts. Information gained through exploiting this issue may aid an attacker in launching further attacks against the target system...

CGI bugs

No description provided...

Apache discloses source code via POST requests to a location with WebDAV and CGI enabled

Overview There is an information leakage in Apache that results from an interaction between WebDAV and CGI. Description Apache version 2.0.42 allows remote attackers to obtain the source code of CGI scripts that are stored in locations for which both CGI and WebDAV are enabled. When a POST reques...