3445 matches found
SurgeLDAP 1.0 d - Full Path Disclosure
SurgeLDAP 1.0 d - Full Path Disclosure source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server...
Cisco IOS HTTP buffer overflow
Buffer overflow on GET request over 2 GB...
CVE-2003-0651
CVE-2003-0651 affects the Apache module mod_mylo, specifically the mylo_log logging function in versions
Multiple Cisco AP bugs
Oversized HTTP GET request DoS. Valid account disclosure...
CVE-2003-0389
Cross-site scripting XSS vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script...
Twilight Webserver 1.3.3.0 (GET) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================= Twilight Webserver 1.3.3.0 GET Remote Denial of Service Exploit ================================================================= Denial of Service Attack against Twilight Webserve...
MyServer 0.4.1 - Remote Denial of Service
source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via malicious HTTP GET requests. It has be...
Pi3Web Malformed GET Request Remote Overflow
The remote Pi3Web web server may crash when it is sent a malformed request, like : GET //?SortName=A This issue may allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11695;...
Pi3Web DoS
GET ///.../// trquest leads to DoS...
MDG Web Server 4D GET Request Remote Overflow
It is possible to kill the web server by sending an oversized string of '' as an argument to a GET request. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. include 'compat.inc' ;...
Pi3Web 2.0.1 - GET Denial of Service
// source: https://www.securityfocus.com/bid/7555/info It has been reported that Pi3Web server is prone to a denial of service vulnerability. Reportedly, when a malicious GET request is sent to the Pi3Web server the server will fail. It should be noted that the Unix version has been reported...
Pi3Web 2.0.1 - GET Denial of Service
Pi3Web 2.0.1 - GET Denial of Service // source: https://www.securityfocus.com/bid/7555/info It has been reported that Pi3Web server is prone to a denial of service vulnerability. Reportedly, when a malicious GET request is sent to the Pi3Web server the server will fail. It should be noted that th...
CVE-2002-1470
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable scserv.log file...
Twilight Utilities TW-WebServer buffer overflow
Buffer overflow on oversized GET request...
Xeneo Web Server 2.2.9 - Denial of Service
Xeneo Web Server 2.2.9 - Denial of Service source: https://www.securityfocus.com/bid/7398/info Xeneo web server has been reported prone to denial of service vulnerability. It has been reported that a specifically crafted HTTP GET request containing over 4096 bytes of data will trigger this...
Xeneo Web Server 2.2.9 - Denial of Service
source: https://www.securityfocus.com/bid/7398/info Xeneo web server has been reported prone to denial of service vulnerability. It has been reported that a specifically crafted HTTP GET request containing over 4096 bytes of data will trigger this vulnerability. Although absolutely unconfirmed, d...
TW-WebServer 1.0 - Denial of Service (2)
// source: https://www.securityfocus.com/bid/7368/info It has been reported that TW-WebServer is prone to a denial of service vulnerability. Reportedly when an excessive quantity of data is sent to the TW-Webserver as part of a malicious HTTP GET request the server will fail. Although unconfirmed...
CVE-2002-0690
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
Abyss Web Server Malformed GET Request Remote DoS
It was possible to kill the remote web server by sending empty HTTP request headers namely Connection: or Range:. An attacker may use this flaw to crash the affected application, thereby denying service to legitimate users. C Tenable Network Security, Inc. References: Date: Sat, 5 Apr 2003 12:21:...
CVE-2002-0945
CVE-2002-0945 describes a buffer overflow in SeaNox Devwex that can be triggered by a long HTTP GET request, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected sources corroborate the basic impact (DoS and potential code executio...