296 matches found
Easy File Sharing Large HTTP Request Remote DoS
Binary data 2148.prm...
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear...
SP Research Labs Advisory 12
SP Research Labs Advisory x12 ----------------------------- BNBT BitTorrent Tracker Denial Of Service ----------------------------------------- Versions: cbtt7520040515 Beta 7.5 Release 2 and prior versions Vendors: http://bnbt.go-dedicated.com/ http://bnbteasytracker.sourceforge.net/...
Web Crossing Web Server 4.0/5.0 Component - Remote Denial of Service
source: https://www.securityfocus.com/bid/9576/info The Web Crossing Web Server component has been reported prone to a remote denial of service vulnerability. It has been reported that the issue will present itself when the affected web server receives a malicious HTTP request that contains...
CVE-2003-1408
Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...
TCM315.txt
. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...
Thomnson TCM315 Denial of service
. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...
CVE-2003-0424
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...
ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS
It is possible to kill the remote HTTP server by sending an invalid request to it. An unauthenticated attacker may leverage this issue to crash the affected server. C Tenable Network Security, Inc. From: "[email protected]" To: [email protected] Subject: Denial of Service Attack against...
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // double slash...
CVE-2003-0338
Directory traversal vulnerability in WsMp3 daemon WsMp3d 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. dot dot sequences in HTTP GET or POST requests...
CVE-2002-1557
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service reset to TCC, TCC+, TCCi or XTC via a malformed HTTP request that does not contain a leading / slash character...
3ware Disk Managment 1.10 - HTTP Request Denial of Service
3ware Disk Managment 1.10 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause t...
CVE-2002-2177
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users...
IBM WebSphere HTTP Request Header Remote Overflow
It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. An attacker may exploit this vulnerability to make your web server crash continually. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References... From:"PeterGrundl"...
CVE-2002-1035
Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service crash via an HTTP request with a long, malformed HTTP 1version number...
CVE-2002-1076
Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0...
Trend Micro OfficeScan tmlisten.exe Malformed Data Remote DoS
It was possible to kill the Trend Micro OfficeScan antivirus management service by sending an incomplete HTTP request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CVE Status: untested TBD:...
Lucent Access Point 3006001500 IP Services Router - Long HTTP Request Denial of Service
Lucent Access Point 3006001500 IP Services Router - Long HTTP Request Denial of Service source: https://www.securityfocus.com/bid/5333/info The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server. It has been...
Lucent Access Point 300/600/1500 IP Services Router - Long HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/5333/info The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server. It has been reported that sending a HTTP request consisting of approximately 4000 characters of data...