CVE-2004-2274: Undefined Security Weakness

Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI...

CVE-2004-2274

Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI...

Jigsaw < 2.2.4 URI Parsing Remote Code Execution

Binary data 1161.prm...

Jigsaw < 2.2.4 Unspecified URI Parsing Unspecified Vulnerability

According to its banner, the remote version of Jigsaw web server has an unspecified vulnerability related to the way it parses URIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12071; scriptversion"1.16"; scriptcveid"CVE-2004-2274"; scriptbugtraqid9711;...

CVE-2002-1053

Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...

CVE-2002-1053

The CVE-2002-1053 entry documents a cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server prior to 2.2.1. The flaw allows remote attackers to inject and have arbitrary script executed via a URL that contains a reference to a nonexistent host, with the script included in the resultin...

CVE-2002-1053: Undefined Security Weakness

Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...

CVE-2002-1052

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...

CVE-2002-1053

Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...

CVE-2002-1052

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...

CVE-2002-1052

CVE-2002-1052 affects Jigsaw Web server 2.2.1 on Windows. The vulnerability arises from processing HTTP requests that reference MS-DOS device names (notably the con and aux devices), allowing an attacker to cause denial of service and, in some reports, to obtain the server’s physical path by send...

CVE-2002-1052: Undefined Security Weakness

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...

W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability &#40;REPOST&#41;

W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability =========================================================== Affected: Jigsaw 2.2.0 and earlier http://www.w3.org/Jigsaw/RelNotes.html2.2.0 Fixed: Jigsaw 2.2.1 http://www.w3.org/Jigsaw/RelNotes.html2.2.1 Exploit:...

KPMG-2002031: Jigsaw Webserver Path Disclosure

-------------------------------------------------------------------- Title: Jigsaw Webserver Path Disclosure BUG-ID: 2002031 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible to disclose the physical path to the webroot...

KPMG-2002034: Jigsaw Webserver DOS device DoS

-------------------------------------------------------------------- Title: Jigsaw Webserver DOS device DoS BUG-ID: 2002034 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can tie up working threads on the web server...

Multiple problems in Jigsaw

DOS-device DoS, path disclosure...

Jigsaw Webserver MS/DOS Device Request Remote DoS

The version of Jigsaw web server running on the remote host has a denial of service vulnerability. It was possible to exhaust all of the web server's available threads by requesting '/servlet/con' about thirty times. A remote attacker could exploit this to repeatedly freeze the web server. C...