4102 matches found
CVE-2005-1909
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...
MiniShare Webserver HTTP GET Request Remote Overflow
MiniShare 1.4.1 and prior versions are affected by a buffer overflow flaw. A remote attacker could execute arbitrary commands by sending a specially crafted file name in a the GET request. Version 1.3.4 and below do not seem to be vulnerable. written by Gareth Phillips - SensePost PTY ltd...
CVE-2005-1813
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing 1 "../" dot dot slash or 2 ".." dot dot backslash sequences...
Invision Power Board 1.x - Unauthorized Access
Invision Power Board 1.x - Unauthorized Access source: https://www.securityfocus.com/bid/13802/info Invision Power Board is affected by an unauthorized access vulnerability. Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing...
CVE-2004-2114
Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL...
Web Server GET Request Saturation Remote DoS
The remote web server shuts down temporarily or blacklists us when it receives several GET HTTP/1.0 requests in a row. This might trigger false positives in generic destructive or DoS plugins. Nessus enabled some countermeasures, however they might be insufficient. C Tenable Network Security, Inc...
CVE-2004-2082
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service pmsystem.exe crash via a GET request wit a large number of leading "/" slash characters...
CVE-2004-2071
CVE-2004-2071 affects Macallan Mail Solution 2.8.4.6 (Build 260) and possibly earlier versions. The vulnerability allows an attacker to bypass authentication in the web interface by issuing an HTTP GET request containing two slashes (//) after the server name. The affected component is the web in...
CVE-2005-1663
Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service server crash via a GET request beginning with "://"...
CVE-2005-1667
DataTrac Activity Console 1.1 is affected by CVE-2005-1667, where a remote attacker can cause a denial of service by sending a long HTTP GET request. The connected documents confirm the affected product/version and the impact (DoS), but do not provide any remediation details or exploitation speci...
CVE-2005-1667
DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request...
CVE-2005-1663
Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service server crash via a GET request beginning with "://"...
CVE-2004-1973
The vulnerability CVE-2004-1973 concerns the DiGi Web Server, where a remote attacker can trigger a denial of service by sending an HTTP GET containing a large sequence of / characters. The server’s processing converts slashes to backslashes, consuming resources and potentially impacting availabi...
CVE-2004-1991
CVE-2004-1991 affects Aldo’s Web Server (aweb) 1.5. The vulnerability is aDirectory traversal in an HTTP GET request that allows an attacker to view arbitrary files by supplying an improper path using .. (dot dot). The NVD metrics indicate a NETWORK attack vector with low complexity and no authen...
CVE-2004-2033
Orenosv 0.5.9f allows remote attackers to cause a denial of service crash via a long HTTP GET request...
CVE-2003-1192
Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request...
CVE-2004-1973
DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...
CVE-2003-1137
Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...
CVE-2003-1138
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...