CVE-2007-4477: Undefined Security Weakness

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

CVE-2006-7027

Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...

CVE-2006-7027: Undefined Security Weakness

Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...

CVE-2007-0838

FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...

Hardcoded credentials

FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...

CVE-2007-0838

FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...

CVE-2007-0838: Undefined Security Weakness

FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (3)

source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...

Novell eDirectory/iMonitor HTTPSTK栈缓冲区溢出漏洞

Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory在处理用户请求构造回应时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 Novell的HTTP协议栈（httpstk）没有检查客户端所提供的HTTP Host请求头（如Host: www.host.com）的值。当服务器在准备HTTP重新定向响应调用snprintf时可能会触发这个漏洞，导致以加载httpstk库进程的权限执行任意指令。C++伪代码如下： define HTTPHDRHOSTFIELD 211 char szHttp = "HTTP"; char...

CVE-2006-5478: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit

No description provided by source. / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back...

Novell eDirectory NDS Server Host Header Overflow

This module exploits a stack buffer overflow in Novell eDirectory 8.8.1. The web interface does not validate the length of the HTTP Host header prior to using the value of that header in an HTTP redirect. Module Options msf use exploit/windows/http/edirectory/host msf undefinedhost show actions...

Blue Coat ProxyAV buffer overflow

Oversized Host: header buffer overflow...

CVE-2005-4085

Buffer overflow in BlueCoat a WinProxy before 6.1a and b the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header...

CVE-2005-4085: Undefined Security Weakness

Buffer overflow in BlueCoat a WinProxy before 6.1a and b the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header...

CVE-2005-4085

Buffer overflow in BlueCoat a WinProxy before 6.1a and b the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header...

CVE-2005-4135: Undefined Security Weakness

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header possibly the name parameter or variable, which is then written to data/topics.php...

CVE-2002-2192: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

WebSphere Host header overflow

It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. A cracker may exploit this vulnerability to make your web server crash continually. OpenVAS Vulnerability Test $Id: webspheretoolongheader.nasl 8023 2017-12-07 08:36:26Z teissa $...

IBM WebSphere Host Header Overflow Vulnerability

It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...