141 matches found
Design/Logic Flaw
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2007-2414
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2007-2414
Technical details about CVE-2007-2414 are not publicly available in the provided documents. Monitor for updates from vendors and CERTs.
CVE-2007-2414: Undefined Security Weakness
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...
MyServer privilege escalation
suid is called before sgid for CGI applications...
Code injection
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges...
CVE-2007-1588
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges...
CVE-2007-1588
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges...
CVE-2007-1588
CVE-2007-1588 affects MyServer 0.8.5: the code path in server.cpp calls Process::setuid before Process::setgid, failing to drop privileges and potentially allowing remote attackers to run CGI programs with unintended privileges.
CVE-2007-1588: Undefined Security Weakness
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges...
MyServer 0.9.8 - Post.MSCGI Cross-Site Scripting
source: https://www.securityfocus.com/bid/24583/info MyServer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
MyServer 0.9.8 - Post.MSCGI Cross-Site Scripting
MyServer 0.9.8 - Post.MSCGI Cross-Site Scripting source: https://www.securityfocus.com/bid/24583/info MyServer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
MyServer-0.5.txt
/ MyServer 0.5 denial of service / / bug found by badpack3t. / / http://myserverweb.sourceforge.net / / / / $ gcc -o fms fms-0.5.c linux version / / $ gcc -o fms fms-0.5.c -DWINDOWS windows version / / / / $ ./fms / / / / Federico Fazzi / include include include if WINDOWS include pragma...
myServer Directory Listing / XSS Vulnerabilities
myServer is prone to directory listing and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
myServer POST Denial of Service
This version of myServer is vulnerable to remote denial of service attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
myServer POST Denial of Service
The remote host is running myServer, an open-source http server. This version is vulnerable to remote denial of service attack. With a specially crafted HTTP POST request, an attacker can cause the service to stop responding. OpenVAS Vulnerability Test $Id: myserverpostdos.nasl 8023 2017-12-07...
EUVD-2004-2507
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences...
CVE-2004-2517
myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...