271 matches found
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specificall...
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specifically, HTTP GET requests that involve reserved MS-DOS device names...
CVE-2002-1895
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...
CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 9.0.2.768 allow remote attackers to execute arbitrary code via 1 a long Transport field in a SETUP RTSP request, 2 a DESCRIBE RTSP request with a long URL argument, or 3 two simultaneous HTTP GET requests with long arguments...
CVE-2002-0298
Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...
CVE-2001-0252
iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...
WhitSoft SlimServe HTTPd 1.1 - 'GET' Denial of Service
source: https://www.securityfocus.com/bid/2451/info SlimServe HTTPd is a free HTTP Daemon maintained by WhitSoft Development. SlimServe is designed to provide basic HTTP services on the Microsoft Windows platform. A problem in the handling of HTTP GET requests could allow a remote user to deny...
CVE-1999-1412
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service crash via a flood of HTTP GET requests to CGI programs, which generates a large number of processes...
Apple Mac OSX Server 10.0 - Overload
source: https://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GET request to a CGI script in a loo...