CVE-2004-2505

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service memory consumption and crash by sending repeated GET or POST requests that trigger error messages that use long strings of data...

CVE-2005-3190

Buffer overflow in Computer Associates CA iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests...

CVE-2005-3190

CA iGateway has a buffer overflow in debug mode that can be triggered by HTTP GET requests, affecting CA iGateway 3.0 and 4.0 prior to version 4.0.050623. The vulnerability allows remote code execution or denial of service. Explanations of impacted versions are confirmed in multiple sources (CA a...

ATutor 1.5.1 - Chat Logs Remote Information Disclosure

ATutor 1.5.1 - Chat Logs Remote Information Disclosure source: https://www.securityfocus.com/bid/14832/info ATutor is prone to a remote information disclosure vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged...

Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure

Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/14312/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary files. Reportedly, the server fails to restrict users from accessing parts of arbitrary files when...

Oracle Reports Server 6.0.89.0.x - XML File Disclosure

Oracle Reports Server 6.0.89.0.x - XML File Disclosure source: https://www.securityfocus.com/bid/14311/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary XML files. Reportedly, the server fails to restrict users from accessing parts of arbitrary XML files when...

CVE-2002-1895

The vulnerability CVE-2002-1895 affects the Tomcat servlet engine in versions 3.3 and 4.0.4 when used with IIS and the ajp1.3 connector. Affected component: servlet engine; issue: remote attackers can trigger a denial of service (crash) by issuing a large sequence of HTTP GET requests for MS-DOS ...

CVE-2002-1895

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...

CVE-2002-1895: Undefined Security Weakness

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...

CVE-2004-2129

Technical details (affected product scope, root cause, impact, and fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2004-2120

Reptile Web Server allows remote attackers to cause a denial of service CPU consumption via multiple incomplete GET requests without the HTTP version...

CVE-2004-2120: Undefined Security Weakness

Reptile Web Server allows remote attackers to cause a denial of service CPU consumption via multiple incomplete GET requests without the HTTP version...

CVE-2004-2129: Undefined Security Weakness

SurfNOW 2.2 allows remote attackers to cause a denial of service crash via a series of long HTTP GET requests, possibly triggering a buffer overflow...

CVE-2001-1451: Undefined Security Weakness

Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...

CVE-2002-1643

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 9.0.2.768 allow remote attackers to execute arbitrary code via 1 a long Transport field in a SETUP RTSP request, 2 a DESCRIBE RTSP request with a long URL argument, or 3 two simultaneous HTTP GET requests with long arguments...

limewire480.txt

Summary: Recent versions of the LimeWire client contain vulnerabilities that allow a remote user access to many or all files on a users machine. LimeWire is a popular client for the Gnutella filesharing network. Vulnerability 1 - Inappropriate Handling of "resource get" requests. Symptom:A remote...

CVE-2004-2129

SurfNOW 2.2 allows remote attackers to cause a denial of service crash via a series of long HTTP GET requests, possibly triggering a buffer overflow...

CVE-2004-0316

Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service crash via 1 a large GET request to port 1080 or 2 a large GET request of % characters to port 8080...

Cross-Site Scripting (XSS) in Php-Nuke 7.1.0

Affected software description: Php-Nuke is popular freeware content management system, written in php by Francisco Burzi. This CMS COntent Management System is used on many thousands websites, because its free of charge, easy to install and has broad set of features. Homepage: http://phpnuke.org...

MyWeb HTTP Server 3.3 - GET Buffer Overflow

MyWeb HTTP Server 3.3 - GET Buffer Overflow // source: https://www.securityfocus.com/bid/10303/info A vulnerability has been reported for MyWeb HTTP server. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable of corrupting...