1178 matches found
Xeneo web server buffer overflow
Buffer overflow on oversized GET request...
Icecast vulnerable to buffer overflow via long GET request
Overview A remotely exploitable buffer overflow exists in Icecast. Description A remotely exploitable buffer overflow exists in Icecast. By sending on overly long GET request to the server, an attacker can execute arbitrary code with the privileges of the Icecast server, or cause the service to...
Multitech RouteFinder 550 - Remote Memory Corruption
Multitech RouteFinder 550 - Remote Memory Corruption source: https://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET...
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specificall...
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specifically, HTTP GET requests that involve reserved MS-DOS device names...
CVE-2002-1895
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...
CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 9.0.2.768 allow remote attackers to execute arbitrary code via 1 a long Transport field in a SETUP RTSP request, 2 a DESCRIBE RTSP request with a long URL argument, or 3 two simultaneous HTTP GET requests with long arguments...
Buffer overflow in GazTek HTTP
Buffer overflow on oversized GET request...
My Web Server 1.0.1/1.0.2 - GET Denial of Service
source: https://www.securityfocus.com/bid/5954/info My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system. It has been reported that My Web Server does not properly handle long requests. Because of...
PlanetWeb 1.14 - GET Buffer Overflow
PlanetWeb 1.14 - GET Buffer Overflow source: https://www.securityfocus.com/bid/5710/info PlanetWeb is a commercially available web server distributed by PlanetDNS. It is available for the Microsoft Windows platform. PlanetWeb is vulnerable to a buffer overflow condition when handling GET requests...
Working Resources BadBlue 1.7.3 - GET Denial of Service
source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests that do not adhere to RFC standards. When a user connects ...
Working Resources BadBlue 1.7.3 - GET Denial of Service
Working Resources BadBlue 1.7.3 - GET Denial of Service source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests th...
CVE-2002-0298
Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...
CVE-1999-1456
Summary : CVE-1999-1456 affects the thttpd HTTP server (version 2.03 and earlier). A remote attacker can read arbitrary files by issuing a GET request where the filename has more than one leading slash (e.g., //path). Affected component : thttpd HTTP server (client request handling/path parsing)....
CVE-2001-0252
iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...
Проблемы в JRUN и JSP (unauthorized access)
Исопльзуя специально составленный GET запрос и возможности SSI можно получить содержимое любого файла. Кроме того, можно получить оглавление каталога...
Savant Web Server Multiple Percent Request Remote DoS
It is possible to cause the Savant web server on the remote host to lock by sending a specially crafted GET request for a URL composed of percent characters. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10633; scriptversion "1.22"; scriptbugtraqid2468;...