IBM AS/400 HTTP Server '/' attack

IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as an .html or .jsp page -- by attaching an '/' to the end of a URL. Compare these two URL's: http://www.foo.com/getsource.jsp http://www.foo.com/getsource.jsp/ The later URL wil...

IBM HTTP Server 1.3.x - Source Code Disclosure

IBM HTTP Server 1.3.x - Source Code Disclosure source: https://www.securityfocus.com/bid/3518/info Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' i...

IBM HTTP Server 1.3.x - Source Code Disclosure

source: https://www.securityfocus.com/bid/3518/info Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' is appended to the end of a request for an...

IBM HTTP Server on AS/400 Trailing Slash Source Code Disclosure

IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as a .html or .jsp page -- by attaching an '/' to the end of a URL. %NASLMINLEVEL 70300 This script was written by Felix Huber Script audit and contributions from Carmichael...

CVE-2001-0122

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator FRCA component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error...

DoS против IBM HTTP Server (afpa memory leak)

Большое число длинных последовательных GET-запросов приводит к утечке памяти...

def-2001-02: IBM HTTP Server Kernel Leak DoS (re-release)

====================================================================== Defcom Labs Advisory def-2001-02 IBM HTTP Server Kernel Leak DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-08 Re-release Date: 2001-03-07...

WebSphere - Minor CSS Issue.

Hi folks, Something i came across while testing some of our WebSphere installations these have been fixed in the current versions of vanilla Apache, so i assume these are just an inherited problem from the old Apache codebase.. Makes you wonder what else there is? :^ Retreiving:...

CVE-2000-1168

IBM HTTP Server 1.3.6 based on Apache allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request...

IBM HTTP Server 1.3 - AfpaCacheWebSphereNet.Data Denial of Service

IBM HTTP Server 1.3 - AfpaCacheWebSphereNet.Data Denial of Service source: https://www.securityfocus.com/bid/2175/info IBM HTTP Server contains AfpaCache directive which turns the Fast Response Cache Accelerator function on or off. WebSphere is a series of applications which are built upon IBM HT...

IBM HTTP Server 1.3 - AfpaCache/WebSphereNet.Data Denial of Service

source: https://www.securityfocus.com/bid/2175/info IBM HTTP Server contains AfpaCache directive which turns the Fast Response Cache Accelerator function on or off. WebSphere is a series of applications which are built upon IBM HTTP Server. Both IBM HTTP Server and Websphere are subject to a deni...

CVE-2000-1168

IBM HTTP Server 1.3.6 based on Apache allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request...

CVE-2000-1168: Undefined Security Weakness

IBM HTTP Server 1.3.6 based on Apache allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request...

Дырка в IBM HTTP Server

Используя определенное количество '/' в URL HTTP-запроса можно обратиться к корневой папке сервера и к любому файлу...

IBM HTTP SERVER / APACHE

I haven't seen any advisories for IBM HTTP SERVER running Apache. There is a crucial number of "/" forward slash you can use to retrieve the contents of the root directory of this particular Web Server. Using this vulnerability, you can retrieve any files or scripts running from that directory an...

minor issue with IBM HTTPD and /usr/bin/ikeyman

Summary: /usr/bin/ikeyman is a shell script installed with setuid root permissions by the IBMHSSSB package on Solaris. The script does not seem to work very well in a Solaris 2.6 environment because of dynamic linker issues; if they are resolved, however, an unprivileged user may then be able to...