Linksys WRT54G Empty GET Request Remote DoS

It is possible to freeze the remote web server by sending an empty GET request. This is known to affect Linksys WRT54G routers. TRUSTED...

CVE-2003-0843

Format string vulnerability in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding...

Webwasher Classic Error-Message XSS Vulnerability

Webwasher Classic Error-Message XSS Vulnerability ================================================= Description =========== WebWasher Classic is vulnerable to a XSS attack. If a HTTP GET-Request, containing script code, is sent to the proxy port default 8080/TCP, an error page is shown, which...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2003-1192

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request...

IA WebMail buffer overflow

Stack overflow on oversized HTTP GET request...

Webweaver DoS

Large number of data in GET request causes server to crash...

IA WebMail Server 3.0/3.1 - GET Buffer Overrun

source: https://www.securityfocus.com/bid/8965/info IA WebMail Server is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable o...

CVE-2003-1137

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...

TinyWeb cgi-bin Crafted HTTP GET Request DoS

According to its banner, the remote version of TinyWeb has a denial of service vulnerability. Issuing a specially crafted GET request similar to : GET /cgi-bin/.%00./dddd.html can cause the server to consume large amounts of CPU time. Changes by Tenable: - Revised plugin title, output formatting,...

CVE-2003-0842

Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...

Savant Web Server 3.1 - Page Redirect Denial of Service

Savant Web Server 3.1 - Page Redirect Denial of Service source: https://www.securityfocus.com/bid/8712/info Savant Web Server is prone to a denial of service vulnerability. The server reportedly goes into an infinite loop upon receipt of a specially crafted HTTP GET request that causes the server...

Savant Web Server 3.1 - Page Redirect Denial of Service

source: https://www.securityfocus.com/bid/8712/info Savant Web Server is prone to a denial of service vulnerability. The server reportedly goes into an infinite loop upon receipt of a specially crafted HTTP GET request that causes the server to repeatedly redirect to the default page...

MyServer 0.5 - GET Argument Buffer Overflow

MyServer 0.5 - GET Argument Buffer Overflow // source: https://www.securityfocus.com/bid/7770/info myServer has been reported prone to a remote buffer overflow vulnerability. The vulnerability exists when the web server attempts to process HTTP GET requests of excessive length. Although...

SurgeLDAP 1.0 d - Full Path Disclosure

SurgeLDAP 1.0 d - Full Path Disclosure source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server...

Cisco IOS HTTP buffer overflow

Buffer overflow on GET request over 2 GB...

CVE-2003-0651

CVE-2003-0651 affects the Apache module mod_mylo, specifically the mylo_log logging function in versions

Multiple Cisco AP bugs

Oversized HTTP GET request DoS. Valid account disclosure...

CVE-2003-0389

Cross-site scripting XSS vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script...

Twilight Webserver 1.3.3.0 (GET) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= Twilight Webserver 1.3.3.0 GET Remote Denial of Service Exploit ================================================================= Denial of Service Attack against Twilight Webserve...