CVE-2005-3182: Undefined Security Weakness

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as 1 Host and 2 Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could me...

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1908: Undefined Security Weakness

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1941: Undefined Security Weakness

Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service crash via a long HTTP GET request with the Host header set...

DEBIAN-CVE-2005-1391

Buffer overflow in the addport function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header...

CVE-2001-1465

CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...

CVE-2005-1112

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages .jsp via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the...

CVE-2005-1112: Undefined Security Weakness

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages .jsp via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the...

IBM WebSphere Widespread configuration JSP disclosure

IBM WebSphere Widespread configuration JSP disclosure Release Date: 04/13/2005 Severity: High Systems Affected IBM WebSphere Application 6 and prior. Description The practice of sharing the document root of the app server within the document root of the web server creates a security exposure that...

Blue Coat WinProxy Host Header Overflow

This module exploits a buffer overflow in the Blue Coat Systems WinProxy service by sending a long port value for the Host header in a HTTP request. Module Options msf use exploit/windows/proxy/bluecoat/winproxyhost msf undefinedwinproxyhost show actions ...actions... msf undefinedwinproxyhost se...

CVE-2002-0840

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

Cerbere Proxy DoS

Oversized Host: header causes infinite loop...

Cerbere Proxy Server Long Host Header Field Overflow DoS

Binary data 2194.prm...

CVE-2002-0840: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different...

CVE-2004-0740: Undefined Security Weakness

The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service server crash, reload, or hang via an HTTP header with a long Host field, possibly triggering a buffer overflow...

Lexmark T522 buffer overflow

Buffer overflow on oversized HTTP Host: header...

CVE-2003-1039

Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 Message Server, 2 Web Dispatcher, or 3 Application Server...

CVE-2003-1039

Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 Message Server, 2 Web Dispatcher, or 3 Application Server...

CVE-2003-1039: Undefined Security Weakness

Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 Message Server, 2 Web Dispatcher, or 3 Application Server...

Monkey HTTP Daemon 0.x - Missing Host Field Denial of Service

source: https://www.securityfocus.com/bid/9642/info Monkey HTTP Daemon is prone to a denial of service attacks. HTTP GET requests, which do not include a 'Host' header field, will trigger this condition. The server will need to be restarted to regain normal functionality...