Lucene search
+L

3227 matches found

Cvelist
Cvelist
•added 2005/04/24 4:00 a.m.•36 views

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

6.5AI score0.01778EPSS
SaveExploits0References3
OSV
OSV
•added 2005/04/14 4:00 a.m.•7 views

DEBIAN-CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

5CVSS6AI score0.12534EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/12 12:00 a.m.•4 views

CVE-2005-0718: Undefined Security Weakness

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

5CVSS5.9AI score0.12534EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2005/02/03 12:00 a.m.•36 views

squid -- DoS on failed PUT/POST requests vulnerability

The squid patches page notes: An inconsistent state is entered on a failed PUT/POST request making a high risk for segmentation faults or other strange errors...

5CVSS6.4AI score0.12534EPSS
SaveExploits0References2
OSV
OSV
•added 2005/01/10 5:00 a.m.•14 views

DEBIAN-CVE-2004-1258

Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...

10CVSS8.3AI score0.05954EPSS
SaveExploits1References1
Metasploit
Metasploit
•added 2004/12/23 12:00 a.m.•30 views

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. Module Options msf use...

7.5CVSS5.8AI score0.70066EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
•added 2004/09/29 12:00 a.m.•27 views

Debian DSA-077-1 : squid - remote DoS

Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squid is configured to restart itself on problems this is not a b...

5CVSS5.5AI score0.02847EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2004/08/18 12:00 a.m.•25 views

Squid < 2.4.STABLE2 mkdir-only PUT Request DoS

Binary data 1524.prm...

5CVSS7.3AI score0.02847EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/07/23 12:00 a.m.•6 views

CVE-2004-0723: Undefined Security Weakness

Microsoft Java virtual machine VM 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."...

6.4CVSS5.9AI score0.13048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/03/18 12:00 a.m.•3 views

CVE-2002-1544: Undefined Security Weakness

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. dot dot sequences in the commands 1 LIST ls, 2 mkdir, 3 put, or 4 get...

6.4CVSS6AI score0.01581EPSS
SaveExploits0References1
CVE
CVE
•added 2002/03/09 5:00 a.m.•49 views

CVE-2001-0621

The CVE concerns Cisco Content Service (CSS) 11000 series switches with WebNS 4.01B23s or 4.10B13s. The FTP server on these devices allows an FTP user to read and write arbitrary files via GET or PUT commands. Root cause: an FTP service misconfiguration/logic flaw enabling unauthorized access to ...

7.5CVSS7AI score0.01396EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2002/03/09 5:00 a.m.•33 views

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

6.4AI score0.02847EPSS
SaveExploits0References8
CVE
CVE
•added 2002/03/09 5:00 a.m.•71 views

CVE-2001-0843

CVE-2001-0843 affects the Squid proxy server (versions 2.4 and earlier). The flaw is triggered by a mkdir-only FTP PUT request, causing the daemon to crash and thus a remote denial of service. Connected advisories (Debian DSA-077-1, Mandrake MDKSA-2001:088, OpenVAS entries) corroborate remote DoS...

5CVSS6.4AI score0.02847EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•4 views

CVE-2001-0843: Undefined Security Weakness

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

5CVSS5.8AI score0.02847EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•8 views

CVE-2001-0621: Undefined Security Weakness

The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...

7.5CVSS5.9AI score0.01396EPSS
SaveExploits0References1
NVD
NVD
•added 2001/12/06 5:00 a.m.•29 views

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

5CVSS6.5AI score0.02847EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2001/09/26 12:00 a.m.•43 views

Squid mkdir-only PUT Request Remote DoS

A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server. An attacker may use this flaw to prevent your LAN users from accessing the web. %NASLMINLEVEL 70300 This script was written by Adam Baldwin See t...

5CVSS5.5AI score0.02847EPSS
SaveExploits0References1
Debian
Debian
•added 2001/09/23 11:52 p.m.•18 views

[SECURITY] [DSA-077-1] squid FTP PUT problem

Package : squid Problem type : remote DoS Debian-specific: no Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squ...

5.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/09/22 12:00 a.m.•59 views

DoS против squid

При PUT-запросе с URL ftp-директории происходит обращение по нулевому адресу...

0.3AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/04/04 12:00 a.m.•3 views

CVE-2001-0283: Undefined Security Weakness

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT...

6.4CVSS6AI score0.05996EPSS
SaveExploits2References1
Rows per page
Query Builder