4687 matches found
Vulnerabilities in BRS WebWeaver
----- Begin Hush Signed Message from [email protected] ----- Vulnerabilities in BRS WebWeaver Overview BRS WebWeaver v0.63 is a combined ftp and web server available from http://bsoutham.home.dhs.org. Vulnerabilities exist in the web server which allow remote users to break out of the web roo...
BRS Webweaver 0.x - FTP Root Full Path Disclosure
source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By submitting the FTP command CD argumented by an...
BRS Webweaver 0.x - FTP Root Full Path Disclosure
BRS Webweaver 0.x - FTP Root Full Path Disclosure source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By...
CVE-2001-0303: Undefined Security Weakness
tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file...
Gene6 BPFTP Server 2.0 - File Existence Disclosure
source: https://www.securityfocus.com/bid/2537/info A user can confirm the existence and location of files and directory structure information, by submitting a 'size' or 'mdtm' command of a file. If the command is carried out by the vulnerable service, the attacker can confirm the location of the...
OReilly Software WebSite Professional 2.5.4 - Path Disclosure
OReilly Software WebSite Professional 2.5.4 - Path Disclosure source: https://www.securityfocus.com/bid/2488/info Requesting a specially crafted URL to a machine running O'Reilly & Associates Website Professional, will disclose the physical path to the root directory. www.example.com/:/...
OReilly Software WebSite Professional 2.5.4 - Path Disclosure
source: https://www.securityfocus.com/bid/2488/info Requesting a specially crafted URL to a machine running O'Reilly & Associates Website Professional, will disclose the physical path to the root directory. www.example.com/:/...
CVE-2001-0224: Undefined Security Weakness
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...
Working Resources BadBlue 1.2.7 - Full Path Disclosure
Working Resources BadBlue 1.2.7 - Full Path Disclosure source: https://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening...
Pi3Web tstisap.dll Long URL Overflow
The '/isapi/tstisapi.dll' cgi is installed. This CGI has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the http service. In addition, it discloses the physical path to the web root if an invalid URL is requested. %NASLMINLEVEL 70300 C Tenable Networ...
Working Resources BadBlue 1.2.7 - Full Path Disclosure
source: https://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program files\badblue\pe\default.htx 2...
John Roy Pi3Web 1.0.1 - Buffer Overflow
John Roy Pi3Web 1.0.1 - Buffer Overflow source: https://www.securityfocus.com/bid/2381/info A buffer overflow vulnerability has been reported in John Roy Pi3Web web server. The ISAPI application within the server fails to properly handle user supplied input. Requesting a specially crafted URL wil...
John Roy Pi3Web 1.0.1 - Buffer Overflow
source: https://www.securityfocus.com/bid/2381/info A buffer overflow vulnerability has been reported in John Roy Pi3Web web server. The ISAPI application within the server fails to properly handle user supplied input. Requesting a specially crafted URL will cause the buffer to overflow and...
Muscat Empower CGI Malformed DB Parameter Path Disclosure
The remote host appears to be running Muscat Empower. It was possible to get the physical location of a virtual web directory by issuing the following command : GET /cgi-bin/empower?DB=whatever HTTP/1.0 A remote attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 C...
Brightstation Muscat 1.0 - Full Path Disclosure
Brightstation Muscat 1.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/2374/info Making an invalid request to a machine running Brightstation Muscat, will disclose the physical path to the root directory. http://target/cgi-bin/empower?DB=UkRteamHole...
Brightstation Muscat 1.0 - Full Path Disclosure
source: https://www.securityfocus.com/bid/2374/info Making an invalid request to a machine running Brightstation Muscat, will disclose the physical path to the root directory. http://target/cgi-bin/empower?DB=UkRteamHole http://target/cgi-bin/empower?DB=UkRteamHole...
HSWeb HTTP Server /cgi Directory Request Path Disclosure (deprecated)
It is possible to request the physical location of the remote web root by requesting the folder '/cgi'. An attacker can exploit this flaw to gain more knowledge about this host. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 C...
Heat-On HSWeb Web Server 2.0 - Full Path Disclosure
source: https://www.securityfocus.com/bid/2336/info Requesting a specially crafted URL will make it possible for a remote attacker to disclose the physical path to the web root and peruse the entire directory listing. http://target/cgi/...
Heat-On HSWeb Web Server 2.0 - Full Path Disclosure
Heat-On HSWeb Web Server 2.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/2336/info Requesting a specially crafted URL will make it possible for a remote attacker to disclose the physical path to the web root and peruse the entire directory listing. http://target/cgi/...
