CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

EUVD-2002-0106

Malware in sbrugna...

EUVD-2004-2308

Malware in sbrugna...

EUVD-2001-0550

Malware in sbrugna...

EUVD-2001-0489

Malware in sbrugna...

EUVD-2002-0335

Malware in sbrugna...

EUVD-2003-1195

Malware in sbrugna...

EUVD-2001-0607

Malware in sbrugna...

EUVD-2002-2004

Malware in sbrugna...

CVE-2002-1916

Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service crash via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries...

MS15-038: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)

The remote Windows host is missing a security update. It is, therefore, affected by multiple privilege escalation vulnerabilities : - A elevation of privilege vulnerability exists due to NtCreateTransactionManager type confusion that allows an authenticated attacker to bypass impersonation-level...

CVE-2015-1644: Undefined Security Weakness

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...

Faust Informatics Freestyle Chat 4.1 SR2 MS-DOS Device Name DoS

No description provided by source. source: http://www.securityfocus.com/bid/2777/info A problem with the chat server makes it possible to deny service to legitmate users. By submitting a request to the webserver including the 'AUX' MS-DOS device name, the webserver can be made to cease functionin...

Microsoft ASP.NET MS-DOS Device Name DoS (PCI-DSS check)

The web server running on the remote host appears to be using Microsoft ASP.NET, and may be affected by a denial of service vulnerability. Requesting a URL containing an MS-DOS device name can cause the web server to become temporarily unresponsive. An attacker could repeatedly request these URLs...

Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability (Aug 2000)

Microsoft FrontPage Server Extensions is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MySQL < 4.1.13 / 5.0.8 DOS Device Name Denial of Service Vulnerabilities

The version of MySQL installed on the remote host is older than 4.1.13 or 5.0.8. On Windows, a remote attacker can crash the server via a 'use' command followed by MS-DOS device name, e.g. LPT1. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17826; scriptversion"1.6"...

CVE-2007-6326

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...

Design/Logic Flaw

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...

CVE-2007-6326

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...

CVE-2007-6326: Improper Input Validation

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...