404 matches found
Zonet NAT problem
During translation to internal network IP address is overwritten with internal IP of the router...
Thunderstone Software Texis Crafted Request Information Disclosure
The remote installation of Texis can be abused to disclose potentially sensitive information about the remote host, such as its internal IP address and the path to various components eg, cmd.exe. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Motorola Cable Modem DOS
I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...
SafeTP 1.46 - Passive Mode Internal IP Address Revealing
source: https://www.securityfocus.com/bid/5822/info SafeTP is a freely available, open source secure ftp client-server software package. It is available for Unix, Linux, and Microsoft Operating Systems. It has been reported that under some circumstances, the SafeTP server may reveal sensitive...
CVE-2002-0422
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...
CVE-2002-0422
CVE-2002-0422 concerns Microsoft IIS 5 and 5.1. WebDAV support can leak an internal IP address. The PROPFIND method with a blank Host header can expose the address in an HREF within a 207 Multi-Status response, and the WRITE or MKCOL methods can leak the internal IP in the Location header. Connec...
CVE-2002-0422
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...
CVE-2001-1018
The CVE-2001-1018 issue affects Lotus Domino Web Server 5.08, where a crafted HTTP GET containing a long sequence of '/' exposes the server’s internal IP address when NAT is enabled. The vulnerability is caused by information disclosure in the server’s response, enabling remote attackers to deter...
CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...
CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...
lotus domino server 5.08 is very gabby
maybe this is nothing new, but when i looked at some html raw headers after i surfed to a lotus domino 5.08 webserver, he tells me the following information : Lotus-Domino Release 5.0.8 - June 18, 2001 on AIX and further a request like this : GET //////////// HTTP/1.0 gives me the internal...
CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...
Microsoft IIS 4.05.06.0 - Internal IP AddressInternal Network Name Disclosure
Microsoft IIS 4.05.06.0 - Internal IP AddressInternal Network Name Disclosure source: https://www.securityfocus.com/bid/3159/info A vulnerability has been discovered in Microsoft IIS that may disclose the internal IP address or internal network name to remote attackers. This vulnerability can be...
Microsoft IIS 4.0/5.0/6.0 - Internal IP Address/Internal Network Name Disclosure
source: https://www.securityfocus.com/bid/3159/info A vulnerability has been discovered in Microsoft IIS that may disclose the internal IP address or internal network name to remote attackers. This vulnerability can be exploited if an attacker connects to a host using HTTPS typically on port 443...
DST2K0032.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 19/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
DST2K0032: Multiple Issues with Talentsoft WebPlus Application Server
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 19/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
TalentSoft Web+ ClientMonitorserver 4.6 - Internal IP Address Disclosure
TalentSoft Web+ ClientMonitorserver 4.6 - Internal IP Address Disclosure source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+...
TalentSoft Web+ Client/Monitor/server 4.6 - Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to retrieve the internal IP address in ...