My Web Server 1.0.1/1.0.2 - GET Denial of Service

source: https://www.securityfocus.com/bid/5954/info My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system. It has been reported that My Web Server does not properly handle long requests. Because of...

PlanetWeb 1.14 - GET Buffer Overflow

PlanetWeb 1.14 - GET Buffer Overflow source: https://www.securityfocus.com/bid/5710/info PlanetWeb is a commercially available web server distributed by PlanetDNS. It is available for the Microsoft Windows platform. PlanetWeb is vulnerable to a buffer overflow condition when handling GET requests...

Working Resources BadBlue 1.7.3 - GET Denial of Service

source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests that do not adhere to RFC standards. When a user connects ...

Working Resources BadBlue 1.7.3 - GET Denial of Service

Working Resources BadBlue 1.7.3 - GET Denial of Service source: https://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests th...

CVE-2002-0298

Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...

CVE-2002-0298

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...

CVE-1999-1456

Summary : CVE-1999-1456 affects the thttpd HTTP server (version 2.03 and earlier). A remote attacker can read arbitrary files by issuing a GET request where the filename has more than one leading slash (e.g., //path). Affected component : thttpd HTTP server (client request handling/path parsing)....

CVE-2001-0252

iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...

Проблемы в JRUN и JSP (unauthorized access)

Исопльзуя специально составленный GET запрос и возможности SSI можно получить содержимое любого файла. Кроме того, можно получить оглавление каталога...

Savant Web Server Multiple Percent Request Remote DoS

It is possible to cause the Savant web server on the remote host to lock by sending a specially crafted GET request for a URL composed of percent characters. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10633; scriptversion "1.22"; scriptbugtraqid2468;...

DoS против IBM HTTP Server (afpa memory leak)

Большое число длинных последовательных GET-запросов приводит к утечке памяти...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

WhitSoft SlimServe HTTPd 1.1 - 'GET' Denial of Service

source: https://www.securityfocus.com/bid/2451/info SlimServe HTTPd is a free HTTP Daemon maintained by WhitSoft Development. SlimServe is designed to provide basic HTTP services on the Microsoft Windows platform. A problem in the handling of HTTP GET requests could allow a remote user to deny...

CVE-2001-0049

WatchGuard SOHO Firewall 2.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a large number of HTTP GET requests. The available descriptions identify the affected product and the impact but do not provide explicit root-cause details, affected subcomponents, versions be...

CVE-2001-0049

WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests...

Netsnap Webcam Software Remote Overflow

Strumpf Noir Society Advisories ! Public release ! -- -= Netsnap Webcam Software Remote Overflow =- Release date: Thursday, November 16, 2000 Introduction: Netsnap is a webcam software package for Win95/98/NT/2k which in addition to filming and picture taking allows the user to directly publish...

CVE-2000-0641

CVE-2000-0641 affects the Savant Web Server (3.1 and earlier) and is linked to multiple vulnerability records in OpenVAS/Nessus indicating a “WWW Too Long URL”/buffer overflow flaw. The available data state that remote attackers could cause the server to execute arbitrary commands via a long GET ...

Дырка в IP-телефонах Siemens HiNet

Переполнение буфера при длинном GET-запросе в встроенном HTTP-сервере...

Переполнение буфера в Website Professional

Классическое переполнение буфера при длинном ключевом слове в утилите webfind.exe и просто при длинных GET-запросах...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

// source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop responding. A restart of the server service is required in ord...