Allaire JRun 3 - Directory Disclosure

source: https://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes, pre-compiled JSP files, server side...

CVE-2000-0778

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...

CVE-2000-0766

Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request...

CVE-2000-0826

Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request...

CVE-2000-0778

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...

CVE-2000-0641

Savant web server allows remote attackers to execute arbitrary commands via a long GET request...

CVE-2000-0521

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number...

CVE-2000-0065

Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request...

CVE-2000-0002

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request...

CVE-2000-0521

Savant web server vulnerability CVE-2000-0521 allows remote disclosure of CGI source by requesting the original CGI form. The OpenVAS NASL description: “Savant original form CGI access” states that attackers can download the unprocessed CGI, exposing sensitive information stored inside those scri...

CVE-2000-0065

The CVE-2000-0065 entry describes a buffer overflow in InetServ 3.0 that allows remote command execution via a long GET request. Connected sources corroborate a “too long URL” condition affecting InetServ 3.0 and note the potential for remote access/execution via buffer overflow (OpenVAS NASL, Te...

CVE-2000-0561

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0561: Undefined Security Weakness

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0641: Undefined Security Weakness

Savant web server allows remote attackers to execute arbitrary commands via a long GET request...

CVE-2000-0065: Undefined Security Weakness

Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request...

CVE-2000-0571: Undefined Security Weakness

LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request...

CVE-2000-0521: Undefined Security Weakness

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number...

CVE-2000-0557: Undefined Security Weakness

Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request...

CVE-2000-0002: Undefined Security Weakness

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request...

CVE-2000-0775: Undefined Security Weakness

Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers...