3457 matches found
CVE-2003-1137
CVE-2003-1137 affects sh-httpd versions 0.3 and 0.4. The issue allows remote attackers to read files or execute arbitrary CGI scripts via a GET request containing an asterisk (*) wildcard character, indicating improper handling of wildcards in input. The provided documents do not specify a fix or...
CVE-2003-1144
Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...
Ashleys Web Server - Denial of Service
Ashleys Web Server - Denial of Service include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73"...
Ashley's Web Server - Denial of Service
include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73" "\x74\x76\x61\x72\x69\x61\x62\x6c\x65\x3d\x67\x69\x66\x20\x48\x54"...
CVE-2005-1173
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...
CVE-2005-1230
Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in a GET request...
CVE-2005-1243
Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-0275
TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...
CVE-2005-0684
CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...
CVE-2005-1238
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...
CVE-2005-1244
NetIQ Security Manager / iSeries Security Solutions (NetIQ) are affected by a directory traversal vulnerability in a third‑party tool used to secure the iSeries AS/400 FTP server. The issue allows access to arbitrary files (including qsys.lib) via ".." sequences in GET requests to the /api/ftp en...
CVE-2005-1240
The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...
CVE-2005-1240
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
CVE-2005-1243
Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...
PMSoftware Simple Web Server (GET Request) Remote BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================= PMSoftware Simple Web Server GET Request Remote BoF Exploit ============================================================= / PMSoftware Simple Web Server Buffer Overflow Exploit 3...
PMSoftware Simple Web Server (GET Request) Remote BoF Exploit
No description provided by source. / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet...
CVE-2005-1230
Yawcam 0.2.5 is vulnerable to a directory traversal flaw in the web server, allowing remote attackers to read files outside the web root via ..\ sequences in a GET request. Affected: Yawcam web server; root cause: improper handling of path traversal. Impact: potential disclosure of arbitrary file...
CVE-2001-1465
CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...
