2212 matches found
CVE-2002-1079
Affects Abyss Web Server 1.0.3. Directory traversal allows remote read of arbitrary files via ..\ in HTTP GET requests; impact is partial confidentiality of data. No explicit remediation details are provided in the connected documents.
CVE-2002-0748
Summary: CVE-2002-0748 affects LabVIEW Web Server 5.1.1–6.1. An HTTP GET request that ends with two newline characters (instead of the expected CR LF CR LF) can cause the web server to crash, yielding a denial of service. The public documents consistently describe this DoS condition as a crash tr...
CVE-2002-0412
NTOP is affected by CVE-2002-0412 due to a format string vulnerability in the TraceEvent function prior to version 2.1. The issue allows remote attackers to execute arbitrary code by injecting format strings into syslog calls. Attack vectors include an HTTP GET request, or credentials supplied in...
CVE-2002-0412: Undefined Security Weakness
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via 1 an HTTP GET request, 2 a user name in HTTP authentication, or 3 a password in HTTP...
CVE-2002-0945: Undefined Security Weakness
Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...
CVE-2002-1025: Undefined Security Weakness
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed...
CVE-2002-1076: Undefined Security Weakness
Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0...
CVE-2002-1079: Undefined Security Weakness
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in an HTTP GET request...
CVE-2002-0748: Undefined Security Weakness
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service crash via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations...
CVE-2002-1549
Buffer overflow in Light HTTPd lhttpd 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...
Light HTTPd 0.1 (Windows) - Remote Buffer Overflow
Buffer overflow in Light HTTPd lhttpd 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: start end module name 00400000 0041a000 lhttpd C:\Documents and Settings\Administrator\My...
CVE-2002-1489
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long URL or 2 a request with a long method name...
CVE-2002-0690
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
CVE-2002-1489: Undefined Security Weakness
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long URL or 2 a request with a long method name...
CVE-2002-0690: Undefined Security Weakness
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
Multitech RouteFinder 550 - Remote Memory Corruption
Multitech RouteFinder 550 - Remote Memory Corruption source: https://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET...
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specificall...
Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service
source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specifically, HTTP GET requests that involve reserved MS-DOS device names...