AnalogX SimpleServer:WWW 1.0.1 - GET Buffer Overflow

AnalogX SimpleServer:WWW 1.0.1 - GET Buffer Overflow source: https://www.securityfocus.com/bid/906/info The SimpleServer:WWW personal webserver package from AnalogX can be compromised due to an overflowable buffer. If a GET request longer than 1000 bytes is received, the software will crash and...

CVE-2000-0043

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request...

Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service

Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service source: https://www.securityfocus.com/bid/897/info The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in \Logs\general.txt http ://target/%...

Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service

source: https://www.securityfocus.com/bid/897/info The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in \Logs\general.txt http ://target/%00/...

CVE-2000-0002

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request...

CVE-1999-0943

Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator...

CVE-1999-1523

Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request...

Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET

Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be...

Netscape Enterprise Server 3.6 SP2/FastTrack Server 2.0.1 - GET

source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be executed remotely at this point. Netscape Enterprise Server 3.5...

Microsoft IIS Traversal GET Request Remote DoS

It is possible to crash IIS by sending the request GET ../../' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10117; scriptversion"1.37"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/05/14";...

Microsoft IIS 5.0 - IISAPI Extension Enumerate Root Web Server Directory

Microsoft IIS 5.0 - IISAPI Extension Enumerate Root Web Server Directory source: https://www.securityfocus.com/bid/194/info A GET request that specifies a nonexistent file with an IISAPI-registered extension ie .pl, .idq will cause the IIS server to return an error message that includes the full...

Microsoft IIS 5.0 - IISAPI Extension Enumerate Root Web Server Directory

source: https://www.securityfocus.com/bid/194/info A GET request that specifies a nonexistent file with an IISAPI-registered extension ie .pl, .idq will cause the IIS server to return an error message that includes the full path of the root web server directory. This can happen if the file is...

Microsoft IIS 4 (Windows NT) - Log Avoidance

Microsoft IIS 4 Windows NT - Log Avoidance // source: https://www.securityfocus.com/bid/191/info An http get request against an IIS4 server will not be logged if the request is longer than 10150 bytes long. / Compile with eg Visual C++ and link with wsock32.lib include include include int main in...

Microsoft IIS 4 (Windows NT) - Log Avoidance

// source: https://www.securityfocus.com/bid/191/info An http get request against an IIS4 server will not be logged if the request is longer than 10150 bytes long. / Compile with eg Visual C++ and link with wsock32.lib include include include int main int argc, char argv int snd, rcv, err,...

Apache 1.2 - Denial of Service

Apache 1.2 - Denial of Service source: https://www.securityfocus.com/bid/2216/info Apache Web Server 1.2 and previous versions are subject to a denial of service. By requesting a malformed GET request composed of an unusually large number of '/' characters, an attacker can cause CPU usage to spik...

Apache 1.2 - Denial of Service

source: https://www.securityfocus.com/bid/2216/info Apache Web Server 1.2 and previous versions are subject to a denial of service. By requesting a malformed GET request composed of an unusually large number of '/' characters, an attacker can cause CPU usage to spike. A restart of the service is...

CVE-1999-1068

Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request...

CVE-2024-35343

Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L,...

CVE-2024-35341

Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFile.ini or /config.xml URIs. This configuration file contains usernames and encrypted passwords encrypted with a hardcoded key common to all devices. This...