PT-2011-4181

Name of the Vulnerable Software and Affected Versions Mongoose version 3.0 yaSSL Embedded Web Server yasslEWS version 0.2 Simple HTTPD shttpd version 1.42 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code via an HTTP PUT request. This ha...

VulnCheck KEV: CVE-2011-2900

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

CVE-2011-2900: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

Israel Forum Hacked by Hawk - MongoOse - TriCk -

Israel Forum Hacked by Hawk - MongoOse - TriCk - Hackers submit the Reason of this hack as following : Offical israel forum website hacked, this website was funded by the israeli government, the website was used to spread lies about Palestine portraying palestinians as "terrorist dogs" Hacked Sit...

Mongoose Web Server 'Content-Length' HTTP Header Remote DoS Vulnerability

Mongoose Web Server is prone to a remote denial of service DoS vulnerability because it fails to handle specially crafted input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mongoose Webserver Content-Length Denial of Service Vulnerability

This host is running Mongoose Webserver and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmongoosewebsrvcntlendosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Mongoose Webserver Content-Length Denial of Service Vulnerability Authors: Veerendra GG Copyright:...

Mongoose Web Server Content-Length DoS Vulnerability

Mongoose Web Server is prone to denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mongoose 2.11 Denial Of Service

------------------------------------------------------------------------ Software................Mongoose 2.11 Vulnerability...........Denial Of Service Download................http://code.google.com/p/mongoose/ Release Date............12/27/2010 Tested On...............Windows XP...

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service source: https://www.securityfocus.com/bid/45602/info Mongoose is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to...

Mongoose 2.11 - 'Content-Length' HTTP Header Remote Denial of Service

source: https://www.securityfocus.com/bid/45602/info Mongoose is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to crash the affected application, denying further service to legitimate...

Mongoose Web Server 2.11 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ========================================================== Mongoose Web Server 2.11 Directory Traversal Vulnerability ========================================================== Author: nitr0us Alejandro Hernandez H. Software Link:...

Mongoose Web Server Multiple Directory Traversal Vulnerabilities

The host is running Mongoose Web Server and is prone to multiple directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbmongoosewebservermultdirtraversalvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Mongoose Web Server Multiple Directory Traversal Vulnerabilities Authors: Antu Sana...

Mongoose Web Server <= 2.11 Multiple Directory Traversal Vulnerabilities

Mongoose Web Server is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mongoose Web Server 2.11 Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Mongoose Web Server 2.11 - Directory Traversal

Mongoose Web Server 2.11 - Directory Traversal Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo...

Mongoose Web Server 2.11 - Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Mongoose Slash Character Remote File Disclosure Vulnerability

Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects Mongoose 2....

Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability

Mongoose Web Server is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mongoose URI Trailing Slash Request Source Code Disclosure

The version of the Mongoose web server running on the remote host discloses the source code of files such as PHP scripts when a trailing slash '/' is appended to a URL. An unauthenticated, remote attacker can leverage this issue to disclose the source of scripts, which may contain passwords and...

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits

Exploit for windows platform in category remote exploits ============================================================== Mongoose Web Server v2.8 Multiple Directory Traversal Exploits ============================================================== Mongoose Web Server v2.8 Multiple Directory Travers...