Lucene search
+L

1945 matches found

securityvulns
securityvulns
added 2002/08/09 12:0 a.m.46 views

iPlane chunked encoding buffer overflow

chunk-encoding POST request heap overflow...

2.3AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2002/07/31 4:23 p.m.8 views

security flaw

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

7.5CVSS6.2AI score0.95027EPSS
SaveExploits10References4
NVD
NVD
added 2002/07/03 4:0 a.m.35 views

CVE-2002-0364

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."...

7.5CVSS7.7AI score0.31005EPSS
SaveExploits4References10
OSV
OSV
added 2002/07/03 4:0 a.m.3 views

DEBIAN-CVE-2002-0392

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

7.5CVSS8AI score0.95027EPSS
SaveExploits10References1
RedHat Linux
RedHat Linux
added 2002/06/20 1:22 p.m.7 views

security flaw

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

7.5CVSS6.2AI score0.95027EPSS
SaveExploits10References4
RedHat Linux
RedHat Linux
added 2002/06/19 11:57 p.m.9 views

Moderate: Red Hat Security Advisory: : : : Updated Apache packages fix chunked encoding issue

The Apache Web server contains a security vulnerability which can be used to launch a denial of service attack or, in some cases, allow remote code execution. Versions of the Apache Web server up to and including 1.3.24 contain a bug in the routines which deal with requests using "chunked"...

7.5CVSS6.1AI score0.95027EPSS
SaveExploits10References2
securityvulns
securityvulns
added 2002/06/18 12:0 a.m.42 views

Buffer overflow in Apache

Signed/unsigned conversion bug on CHUNKed POST...

4.7AI score
SaveExploits0References4Affected Software1
exploitpack
exploitpack
added 2002/06/17 12:0 a.m.59 views

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption (2)

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption 2 // source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretatio...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2002/06/17 12:0 a.m.134 views

Apache 1.x/2.0.x - Chunked-Encoding Memory Corruption (2)

// source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer value. Consequently, several...

7.5CVSS5.8AI score0.95027EPSS
SaveExploits10
Exploit DB
Exploit DB
added 2002/06/17 12:0 a.m.102 views

Apache 1.x/2.0.x - Chunked-Encoding Memory Corruption (1)

// source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer value. Consequently, several...

7.5CVSS5.8AI score0.95027EPSS
SaveExploits10
securityvulns
securityvulns
added 2002/06/17 12:0 a.m.60 views

Apache httpd: vulnerability with chunked encoding

-----BEGIN PGP SIGNED MESSAGE----- Date: June 17, 2002 Product: Apache Web Server Versions: Apache 1.3 all versions including 1.3.24, Apache 2 all versions up to 2.0.39 Introduction: While testing for Oracle vulnerabilities, Mark Litchfield discovered a denial of service attack for Apache on...

7.5CVSS0.2AI score0.95027EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
added 2002/06/17 12:0 a.m.81 views

Apache Chunked Encoding Remote Overflow

The remote Apache web server is affected by the Apache web server chunk handling vulnerability. If safe checks are enabled, this may be a false positive since it is based on the version of Apache. Although unpatched Apache versions 1.2.2 and above, 1.3 through 1.3.24, and 2.0 through 2.0.36 are...

7.5CVSS5.4AI score0.95027EPSS
SaveExploits10References3
exploitpack
exploitpack
added 2002/06/17 12:0 a.m.52 views

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption (1)

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption 1 // source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretatio...

0.1AI score
SaveExploits0
CERT
CERT
added 2002/06/13 12:0 a.m.44 views

Microsoft Internet Information Server (IIS) contains remote buffer overflow in chunked encoding data transfer mechanism for HTR

Overview A buffer overflow vulnerability in IIS 4.0 and 5.0 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the HTR ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to a web...

7.5CVSS7.6AI score0.31005EPSS
SaveExploits4References1
CERT
CERT
added 2002/06/13 12:0 a.m.36 views

Chunked encoding post can consume excessive memory on IIS 4.0 webserver

Overview Microsoft IIS 4.0, circa March 2000, contained a vulnerability that allowed an intruder to consume unlimited memory on a vulnerable server. Description Older versions of IIS 4.0, circa March 2000, contained a vulnerability in the chunked-encoding transfer mechanism that permitted an...

5CVSS6.5AI score0.06808EPSS
SaveExploits0References5
Apache Httpd
Apache Httpd
added 2002/05/27 12:0 a.m.74 views

Apache Httpd < 2.0.37 : Apache Chunked encoding vulnerability

Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code...

7.5CVSS3AI score0.95027EPSS
SaveExploits10Affected Software1
Apache Httpd
Apache Httpd
added 2002/05/27 12:0 a.m.68 views

Apache Httpd < 1.3.26 : Apache Chunked encoding vulnerability

Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code...

7.5CVSS3AI score0.95027EPSS
SaveExploits10Affected Software1
exploitpack
exploitpack
added 2002/04/24 12:0 a.m.35 views

Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow (4)

Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow 4 / source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2002/04/24 12:0 a.m.74 views

Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (4)

/ source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This condition affects IIS 4.0 and IIS 5.0. Exploitation of this...

7.5CVSS5.8AI score0.77341EPSS
SaveExploits8
Exploit DB
Exploit DB
added 2002/04/14 12:0 a.m.38 views

Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (2)

// source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This condition affects IIS 4.0 and IIS 5.0. Exploitation of this...

7.5CVSS5.8AI score0.77341EPSS
SaveExploits8
Rows per page
Query Builder