Apache Httpd < 2.0.46 : Filtered escape sequences

Apache did not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...

Trend Micro Virus Control System 1.8 - Information Disclosure

source: https://www.securityfocus.com/bid/6618/info An information disclosure vulnerability has been reported for TVCS. Reportedly, it is possible for an attacker to access the log files generated by TVCS. The log files contain very sensitive information about the system, including user names and...

CodeBlue 5.1 - SMTP Response Buffer Overflow

CodeBlue 5.1 - SMTP Response Buffer Overflow // source: https://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The conditi...

SonicWALL SOHO3 6.3 - Content Blocking Script Injection

SonicWALL SOHO3 6.3 - Content Blocking Script Injection source: https://www.securityfocus.com/bid/4755/info The Sonicwall SOHO3 is an Internet security appliance that provides firewall security solutions. Reportedly, a vulnerability exists in the product that allows for a script injection attack ...

Cgisecurity Paper #4: Header Based Exploitation: Web Statistical Software Threats

Hello, Below is a paper I wrote on some threats that web statistical software faces in regards to header manipulation. I've decided to include 1 product affected by this to show that this is very possible. Product: w3perl Vendor: http://www.w3perl.com Patch: http://www.w3perl.com/download/ Upgrad...

CVE-2001-0870

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file...

CVE-2001-0077

CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...

CVE-2001-1403

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar...

CVE-2001-0300

The CVE-2001-0300 issue pertains to the Oracle Internet Directory LDAP Daemon (oidldapd) version 2.1.1.1 included with Oracle 8i/8.1.7. The daemon writes logs to a directory (ldaplog) that has world‑writable permissions, enabling a local user to delete logs and, via a symlink attack, overwrite ot...

CORRECTION to CODE: FormMail.pl can be used to send anonymous email

Hi All, I did a little playing with FormMail.pl after a run in with a spammer abusing our webserver. Apparently ALL FormMail.pl cgi-bin scripts can be used to spam anonymously. I found another server with FormMail.pl and tried the same exploit to send myself an email and it worked. The email will...

CVE-2001-0019

Arrowpoint (Cisco Content Services) is affected by a local DoS vulnerability where a long argument to the commands show script, clear script, show archive, clear archive, show log, or clear log can cause denial of service. The CVE description and NVD entry specify local access and partial availab...

CVE-2000-1179

Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters...

CVE-2000-1179

Netopia ISDN Router 650-ST prior to firmware 4.3.5 is affected. An unauthenticated attacker can read system logs by directly connecting to the login screen and sending certain control characters, exposing partial confidentiality without user interaction. The description does not specify firmware ...

CVE-2000-0967

CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...

Дырка в маршрутизаторах Netopia

нажатие комбинаций Ctrl-F и Ctrl-E в telnet-сеансе дают доступ к логам маршрутизатора до авторизации...

CVE-2000-0642

The WebActive HTTP Server 1.00 stores the web access log active.log in the document root, allowing remote viewing via direct requests and enabling information disclosure about site visitors. This relies on the default configuration. Remediation guidance from the connected data includes using a di...

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password

source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access log or by sniffing. ---------from...

FW-1 IP Fragmentation Vulnerability

DISCLAIMER It was never my intent to identify a DoS attack on FW-1. I was attempting to research and understand how FW-1 handles IP Fragmentation. Everthing that follows is a result of that research. Full findings of my research can be found at http://www.enteract.com/lspitz/fwtable.html...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...

favicon.ico.search.txt

Date: Fri, 16 Apr 1999 22:11:22 -0700 From: "Robert David Graham" Subject: favicon.ico In case you haven't heard, Microsoft has a new feature in IE 5.0 web browser. When you add a website to you "Favorites" aka. Bookmarks for you Netscape users, the browser attempts to download a graphic called...