CVE-2003-1270

AN HTTP 1.41e allows remote attackers to cause a denial of service borken pipe via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability...

CVE-2003-1269

AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message...

XSS in Null HTTPd

Null HTTPd is a simple HTTP server that runs on Win32/Unix systems. It is quite basic, but offers good CGI support. A vulnerability in Null HTTPd may allow cross-site scripting via a 404 page: http://localhost/a?x=SCRIPTalertdocument.URL/SCRIPT You have to place this in the query string so that i...

CVE-2002-1078

Affects Abyss Web Server 1.0.3. The vulnerability allows remote attackers to trigger directory listing by sending an HTTP GET request that ends with a large sequence of / characters. The underlying cause is not detailed in the provided documents beyond the request construction; the impact is expo...

MacOS X SoftwareUpdate Vulnerability

---------------------------------------------------------------------------- MacOS X SoftwareUpdate Vulnerability. ---------------------------------------------------------------------------- Date: July 6, 2002 Version: MacOS 10.1.X and possibly 10.0.X Problem: MacOS X SoftwareUpdate connects to...

Microsoft SQL Server 2000 - 'SQLXML' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML...

Cisco IOS 11.x/12.x - HTTP Configuration Arbitrary Administrative Access (4)

source: https://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices using affected releases of IOS. By...

Cisco IOS 11.x/12.x - HTTP Configuration Arbitrary Administrative Access (1)

source: https://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices using affected releases of IOS. By...

Raptor 6.5 http vulnerability

Problem Description The Raptor firewall is vulnerability for forwarding http request on other port numbers than 80, if a rule allows http traffic. Redirect rules does not affect this problem. When an extern or internal client, configures itself to use the nearest interface as proxy, it's...

Cisco IOS 11.x12.x - HTTP Configuration Arbitrary Administrative Access (3)

Cisco IOS 11.x12.x - HTTP Configuration Arbitrary Administrative Access 3 source: https://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full...

Microsoft refuses to fix a security bug in Windows 2000

Microsoft refuses to fix a security bug in Windows 2000 Eugene Kalinin Medical Informatics Laboratory Moscow, Russia Aug 16, 2000 Yesterday Microsoft refused to fix a security problem in Windows 2000 RPC service. The bug in RPC service allows an attacker to put a Windows 2000 server out of servic...

Glimpse HTTP aglimpse Arbitrary Command Execution

The remote web server is running GlipmseHTTP. The installed version suffers from a remote command execution vulnerability in the 'aglimpse' component. Note that we could not actually check for the presence of this vulnerability, and only checked for the existence of the 'aglimpse' CGI...

quakenbush-nt-password.txt

L0pht Security Advisory Advisory released Jan. 21, 1999 Application: Quakenbush Windows NT Password Appraiser Severity: Users of the tool Password Appraiser are unwittingly publishing NT user passwords to the internet even if your company is behind a firewall. Author: [email protected]...