3427 matches found
CVE-2006-5210
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IMFILE identifier with double-url-encoded "../" sequences "%252e%252e/"...
CVE-2006-5112
CVE-2006-5112 reflects a buffer overflow in the NaviCOPA Web Server 2.01 caused by handling of long HTTP GET requests, enabling remote code execution. Connected sources confirm a public proof-of-concept/exploit vector: a Metasploit module named navicopa_get_overflow (and related exploit reference...
CVE-2006-5112
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request...
NaviCOPA Web Server buffer overflow
Buffer overflow on oversized GET request...
Multi-Threaded TFTP 1.1 - GET Denial of Service
Multi-Threaded TFTP 1.1 - GET Denial of Service !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
No description provided by source. !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is credited for...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Multithreaded TFTP And any-one else i forgot ^ ^. \DEBUG INF0// First chance exceptions are reported before any exception handling. This exception may be expected and handled...
CVE-2006-4523
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...
CVE-2006-4523
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...
PT-2006-5318 · 2Wire · Officeportal +1
Name of the Vulnerable Software and Affected Versions: 2Wire, Inc. HomePortal and OfficePortal Series modems and routers affected versions not specified Description: The issue concerns the web-based management interface, which can be crashed by remote attackers through a specific sequence in a GE...
CVE-2006-4450
usercpavatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request...
NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://knusperleicht.at/ | |...
CVE-2006-3534
The SHOUTcast DSP server is affected by two CVEs: CVE-2006-3534 (pre-1.9.6) and CVE-2006-3535 (pre-1.9.7). The underlying issue is a directory traversal filter bug that decodes input after treating encoded sequences, enabling remote attackers to read arbitrary files via encoded dot-dot (%2E%2E) i...
GLSA-200607-05 : SHOUTcast server: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200607-05 SHOUTcast server: Multiple vulnerabilities The SHOUTcast server is vulnerable to a file disclosure when the server receives a specially crafted GET request. Furthermore it also fails to sanitize the input passed to the...
CVE-2006-3252
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...
CVE-2006-3252
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...
ARX PrivateWire security toolbox buffer overflow
Online Registration Facility oversized GET request buffer overflow...
CVE-2006-2756
Technical details about CVE-2006-2756 are not publicly available in the provided connected documents; monitor for updates. The initial description notes a remote denial-of-service via a long GET request against Eitsop/My Web Server 1.0.
уязвимость в Sad Raven's guestbook
доброе время суток. Недавно я нашел уязвимость в Sad Raven's guestbook версии 1.1, которая позволяет любому пользователю получить доступ в админ-центр. Заранее прошу извинить, если эту уязвимость уже кто-то нашел, но я не нашел нигде о ней никакого упоминания. Все говорят только о том, что пароли...
Fenice <= 1.10 Multiple Remote Vulnerabilities
The remote host is running Fenice, an open source media streaming server for Linux / Unix. The version of Fenice installed on the remote host is affected by an integer overflow vulnerability involving requests with large values for the 'Content-Length' header and by a buffer overflow vulnerabilit...