CVE-2000-0561

The CVE-2000-0561 entry describes a buffer overflow in WebBBS 1.15 that allows remote attackers to execute arbitrary commands via a long HTTP GET request. Affected software is WebBBS 1.15; root cause is a buffer overflow triggered by oversized HTTP requests. Impact is indicated as partial confide...

CVE-2000-0778

CVE-2000-0778 affects Microsoft IIS (IIS 5.0/5.1). Vulnerability arises from an information-disclosure flaw where an HTTP Translate: f header allows remote attackers to obtain ASP/ASA source code. Affected products include Windows IIS; root cause is improper handling of the Translate header leadi...

CVE-2000-0561

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0561: Undefined Security Weakness

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0778: Undefined Security Weakness

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...

CVE-2000-0775: Undefined Security Weakness

Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers...

DoS против vqServer

Переполнение буфера при длинном HTTP-GET запросе...

Переполнение буфера в Viking Server

Классическое переполнение буфера в HTTP-GET запросе...

Translate:f summary, history and thoughts

Because Microsoft went the way of HIDING the actual mechanism of Translate:f from all of us original KB article is gone and new Security Bulletin is playing nasty game of downplaying the problem, i have decided to write follow up with sufficient information. HOW IT WORKS -------------------------...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (2)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

Microsoft IIS 5.0 - Translate: f Source Disclosure (1)

Microsoft IIS 5.0 - Translate: f Source Disclosure 1 source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

CVE-2000-0398

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querystring parameter in the HTTP GET request...

CVE-2000-0398

The CVE-2000-0398 issue affects Rockliffe MailSite Management Agent, due to a buffer overflow in wconsole.dll that can be triggered by a long query_string parameter in an HTTP GET request. This allows remote attackers to potentially execute arbitrary commands. Public documents identify the vulner...

CVE-1999-0378: Undefined Security Weakness

InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...

CVE-2000-0376: Undefined Security Weakness

Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0398: Undefined Security Weakness

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querystring parameter in the HTTP GET request...

CVE-2000-0593

WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number...

CVE-2000-0561

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0398

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querystring parameter in the HTTP GET request...