Multiple Trillian instant messenger buffer overflows

Multiple buffer overflow on parsing HTTP-based protocols, including RSS...

[SA14091] Squid Oversized Reply Header Handling Security Issue

TITLE: Squid Oversized Reply Header Handling Security Issue SECUNIA ADVISORY ID: SA14091 VERIFY ADVISORY: http://secunia.com/advisories/14091/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: A security issue with an...

CVE-2004-0356

CVE-2004-0356: A stack-based buffer overflow in the Supervisor Report Center of SL Mail Pro 2.0.9 and earlier allows remote code execution via an HTTP request containing a long HTTP sub-version. Affects SL Mail Pro up to version 2.0.9; exploitation details are not provided in the connected docume...

Home/Office Router Detection (HTTP)

Binary data 1607.prm...

Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1615.prm...

Buffalo Wireless Router Detection (HTTP) (deprecated)

Binary data 1608.prm...

NETGEAR Wireless Router Detection (HTTP) (deprecated)

Binary data 1610.prm...

Broadcom Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1624.prm...

Corsaire Security Advisory - Sygate Secure Enterprise replay issue

-- Corsaire Security Advisory -- Title: Sygate Secure Enterprise replay issue Date: 20.11.03 Application: Sygate Secure Enterprise prior to 3.5MR3 Environment: Windows NT, 2000, 2003 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c031120-002 -- Scope --...

SurgeLDAP10.txt

SurgeLDAP 1.0g Web service user.cgi File retrieval Release Date: April 13, 2004 Severity: Low Vendor: http://netwinsite.com Details: SurgeLDAP is an advanced easy to manage and install high performance LDAP v3 server. It supports any number of schemas, easy to add/modify existing schemas,...

CVE-2003-0866

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests...

CVE-2003-0866

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests...

CVE-2003-0866: Undefined Security Weakness

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests...

compaq.txt

SSI vulnerability in Compaq Web Based Management Agent ====================================================== Type of vulnerabilities: Server Side Include injection. Exploitable. Stack overflows and access violations. Exploitable? Creation of script objects. Exploitable? Affected Software: Compaq...

3Com SuperStack 3 Firewall - Content Filter Bypassing

source: https://www.securityfocus.com/bid/7021/info A vulnerability has been reported in the 3Com Superstack 3 Firewall. HTTP content filters put in place by the device fail to assemble fragmented data, potentially allowing an attacker to access unauthorized web sites. An attacker could exploit...

CVE-2000-0817: Undefined Security Weakness

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

@stake Advisory: SuSE Apache WebDAV Directory Listings (A090700-3 )

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com www.cerberus-infosec.co.uk Security Advisory Advisory Name: SuSE Apache WebDAV Directory Listings A090700-3 Release Date: 09/07/2000 Application: Apache 1.3.12 Platform: SuSE Linux 6.4 Severity: Attackers are able to retrie...

Apache 1.3.12 - WebDAV Directory Listings

source: https://www.securityfocus.com/bid/1656/info WebDAV Web Distributed Authoring and Versioning is an extension of HTTP which allows users to create, edit and share documents using the HTTP protocol. A particular REQUEST METHOD, PROPFIND, allows users to retrieve resource properties such as...

Переполнения буфера в WebBBS

Любая длинная строка в HTTP-протоколе вызывает классическое переполнение буфера...

savant.dos.txt

Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K USSR Advisory Code: USSR-99026 Release Date: December 28, 1999 2/5 Systems Affected: Savant Web Server V2.0 Win9X / NT / 2K and possibly others versions. About The Software: Savant provides support for most modern web features...