Siemens Gigaset IP Series SIP Username Enumeration

Siemens Gigaset ip series sip username enumeration Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 23/08/2011 Criticality level: Low Impact: Information leak Device: Siemens Gigaset IP series Tested A580IP Description: I've...

HTTP Methods Allowed (per directory)

By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory. The following HTTP methods are considered insecure: PUT, DELETE, CONNECT, TRACE, HEAD Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...