4356 matches found
CVE-2002-1120
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
PlanetWeb 1.14 - GET Buffer Overflow
source: https://www.securityfocus.com/bid/5710/info PlanetWeb is a commercially available web server distributed by PlanetDNS. It is available for the Microsoft Windows platform. PlanetWeb is vulnerable to a buffer overflow condition when handling GET requests of excessive length. Upon receiving ...
security flaw
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...
CVE-2002-1120
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1120
CVE-2002-1120 affects Savant Web Server 3.1 and earlier. The vulnerability is a stack-based buffer overflow triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code on the affected server. Public references show exploit code and Metasploit modules targeting Savant...
CVE-2002-1120: Undefined Security Weakness
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1012
CVE-2002-1012 affects IBM Tivoli Management Framework (TMF) ManagedNode, specifically TMF 3.6.x through 3.7.1. It is a remote vulnerability: a crafted long HTTP GET request can trigger a buffer overflow in the web server, leading to denial of service or arbitrary code execution. The issue is docu...
CVE-2002-1023
BadBlue server allows remote attackers to cause a denial of service crash via an HTTP GET request without a URI...
CVE-2002-1003
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1012
Buffer overflow in web server for Tivoli Management Framework TMF ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request...
CVE-2002-1078
Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / slash characters...
CVE-2002-1003: Undefined Security Weakness
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1061: Undefined Security Weakness
Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...
CVE-2002-1023: Undefined Security Weakness
BadBlue server allows remote attackers to cause a denial of service crash via an HTTP GET request without a URI...
Buffer overflow in MyWebServer
Buffer overflow on oversized GET request...
Oracle Web Cache Admin Module Multiple GET Request Method DoS
It was possible to kill the web server by requesting '/.' or '/../', or sending an invalid request using chunked content encoding. An attacker may exploit this vulnerability to crash the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichae...
CVE-2002-0748
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service crash via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations...
CVE-2002-0415
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...
CVE-2002-0482
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. dot dot in the HTTP GET request...