610 matches found
CVE-2002-1916
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service crash via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries...
CVE-2005-1729
Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service application crash via a URL containing an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1...
CVE-2005-0275
TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...
CVE-2005-0799
MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...
CVE-2004-0466
The CVE-2004-0466 issue affects OpenConnect WebConnect (Windows) versions 6.4.4 and 6.5 (and possibly earlier). A denial-of-service vulnerability occurs when an HTTP request URL contains an MS-DOS device name (AUX, CON, PRN, COM1, LPT1); the server may stop responding to further requests, causing...
OpenConnect Webconnect MS-DOS device name denial-of-service
Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...
CVE-2004-1514
04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.
CVE-2004-2316
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...
Abyss Web Server MS-DOS Device Name DoS
It was possible to kill the web server by sending an MS-DOS device name in an HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15563; scriptversion"1.19"; scriptxrefname:"Secunia", value:"12900"; scriptnameenglish:"Abyss Web Server MS-DOS Device Name DoS"...
Multiple antivirii DoS
Creation of file with oversized path or special device name causes application to hang or allows detection bypassing. ZIP with zero archive length allow to bypass checking...
Mutiple AntiVirus Reserved Device Name Handling Vulnerability
Mutiple AntiVirus Reserved Device Name Handling Vulnerability Author:Sowhat Date:October,9th,2004 http://secway.org/Advisory/Ad20041009.txt Vendor: AntiVir www.hbedv.com Twister www.filseclab.com Protector plus 2000 www.pspl.com Overview: As many popular AV's "Reserved Device Name Handling...
Apache < 2.0.46 on OS/2 filestat.c Device Name Request DoS
Binary data 1535.prm...
CVE-2004-0050
The CVE-2004-0050 issue affects Verity Ultraseek (Inktomi Search) prior to 5.2.2 where an MS-DOS device name parameter in the web search option can cause disclosure of the full path to the document root. The OpenVAS entries corroborate a physical path disclosure vulnerability in Ultraseek/Verity,...
CVE-2004-0466
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service hang via a URL containing an MS-DOS device name such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...
CVE-2003-0671
CVE-2003-0671 affects tcpflow and is described as a format string vulnerability that, when tcpflow runs in a setuid context (notably the RunTCPFlow program used by Sustworks IPNetSentryX and IPNetMonitorX), allows local users to execute arbitrary code via the device name argument. The available d...
CVE-2003-0421
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service crash via an MS-DOS device name e.g. AUX in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502...
Apache Tomcat DOS Device Name XSS
Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. By making requests for DOS Device names it is possible to cause Tomcat to throw an exception, allowing cross-site scripting attacks. The exception...
CVE-2002-0200
Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name...
Windows 98 FTP MS/DOS Device Name Request DoS
It was possible to freeze or reboot Windows by reading a MS/DOS device through FTP, using a file name like CON\CON, AUX.htm, or AUX. An attacker may use this flaw to continuously crash the affected host, preventing users from working properly. C Tenable Network Security, Inc. Script audit and...