3227 matches found
CVE-2005-1238
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...
DEBIAN-CVE-2005-0718
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...
CVE-2005-0718: Undefined Security Weakness
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...
squid -- DoS on failed PUT/POST requests vulnerability
The squid patches page notes: An inconsistent state is entered on a failed PUT/POST request making a high risk for segmentation faults or other strange errors...
DEBIAN-CVE-2004-1258
Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. Module Options msf use...
Debian DSA-077-1 : squid - remote DoS
Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squid is configured to restart itself on problems this is not a b...
Squid < 2.4.STABLE2 mkdir-only PUT Request DoS
Binary data 1524.prm...
CVE-2004-0723: Undefined Security Weakness
Microsoft Java virtual machine VM 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."...
CVE-2002-1544: Undefined Security Weakness
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. dot dot sequences in the commands 1 LIST ls, 2 mkdir, 3 put, or 4 get...
CVE-2001-0621
The CVE concerns Cisco Content Service (CSS) 11000 series switches with WebNS 4.01B23s or 4.10B13s. The FTP server on these devices allows an FTP user to read and write arbitrary files via GET or PUT commands. Root cause: an FTP service misconfiguration/logic flaw enabling unauthorized access to ...
CVE-2001-0843
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...
CVE-2001-0843
CVE-2001-0843 affects the Squid proxy server (versions 2.4 and earlier). The flaw is triggered by a mkdir-only FTP PUT request, causing the daemon to crash and thus a remote denial of service. Connected advisories (Debian DSA-077-1, Mandrake MDKSA-2001:088, OpenVAS entries) corroborate remote DoS...
CVE-2001-0843: Undefined Security Weakness
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...
CVE-2001-0621: Undefined Security Weakness
The FTP server on Cisco Content Service 11000 series switches CSS before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands...
CVE-2001-0843
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...
Squid mkdir-only PUT Request Remote DoS
A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server. An attacker may use this flaw to prevent your LAN users from accessing the web. %NASLMINLEVEL 70300 This script was written by Adam Baldwin See t...
[SECURITY] [DSA-077-1] squid FTP PUT problem
Package : squid Problem type : remote DoS Debian-specific: no Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squ...
DoS против squid
При PUT-запросе с URL ftp-директории происходит обращение по нулевому адресу...
CVE-2001-0283: Undefined Security Weakness
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT...