CVE-2001-0892: Exposure of Resource to Wrong Sphere

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-2001-0893: Exposure of Resource to Wrong Sphere

Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

EUVD-2001-0805

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for 1 orders.txt or 2 authuserfile.txt...

CVE-2001-0821

DCShop 1.002 beta default configuration exposes sensitive files in the cgi-bin directory (orders.txt, auth_user_file.txt), allowing remote reads via HTTP GET. Connected OpenVAS entry corroborates a vulnerable DCShop CGI release and suggests access to admin passwords, current/pending transactions,...

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-2001-1287

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2001-0778

Affected software: OmniHTTPd (OmniPro HTTPd) up to 2.08. Vulnerability: remote attackers can disclose source code of scripting files by sending a URL with an encoded space (%20); the flaw is not present for CGI directories (cgibin/cgi-win). Impact: information disclosure of script/source files (c...

CVE-2001-0778: Undefined Security Weakness

OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space %20...

Получение реального IP сервера Lotus Domino (information leakage)

С помощью запроса GET //////////// HTTP/1.0 можно получить сведения о реальном IP Сервера...

CVE-2000-0243

The CVE-2000-0243 issue affects AnalogX SimpleServer:WWW, version 1.03. A remote denial-of-service is triggered by a short GET request to a CGI-bin path, crashing the server. The vulnerability is tied to the handling of specially formatted requests (exactly 8 characters after /cgi-bin/). No speci...

CVE-2000-0243: Undefined Security Weakness

AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin...

CVE-1999-1523

Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request...

CVE-1999-1523

CVE-1999-1523 concerns the Sambar Web Server 4.2.1. A buffer overflow in the HTTP GET handling allows a remote attacker to cause a denial of service and possibly execute arbitrary commands. The vulnerability is remote, with no authentication required, and is enabled by sending a long HTTP GET req...

CVE-2001-0647: Undefined Security Weakness

Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version...

CVE-1999-1068: Undefined Security Weakness

Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request...

Microsoft IIS 4.05.06.0 - Internal IP AddressInternal Network Name Disclosure

Microsoft IIS 4.05.06.0 - Internal IP AddressInternal Network Name Disclosure source: https://www.securityfocus.com/bid/3159/info A vulnerability has been discovered in Microsoft IIS that may disclose the internal IP address or internal network name to remote attackers. This vulnerability can be...

CVE-2001-0647

Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version...