EUVD-2007-0142

Malware in sbrugna...

Information disclosure

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...

CVE-2007-0138

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...

CVE-2007-0138

The CVE-2007-0138 entry concerns Fersch Formbankserver 1.9. The vulnerability arises when PATH_INFO begins with AbfrageForm or EingabeForm, allowing remote attackers to trigger a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name parameter. Th...

CVE-2006-6910

Analysis of CVE-2006-6910 (Fersch Formbankserver 1.9) shows that formbankcgi.exe is vulnerable when PATH_INFO begins with Abfrage. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name paramete...

CVE-2006-6910

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with Abfrage, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter...

CVE-2006-6910: Undefined Security Weakness

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with Abfrage, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter...

CVE-2007-0138: Undefined Security Weakness

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...