8139 matches found
Xitami Malformed POST Request Infinite Loop Remote DoS
The remote host is running a vulnerable version of the Xitami web server. It is possible to freeze the remote web server by sending a malformed POST request. This is known to affect Xitami versions 2.5 and earlier. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11934;...
CVE-2003-1084
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request with a negative Content-Length field...
[Full-Disclosure] Xitami Denial of Service in Handling malformed request
Xitami Denial of Service in Handling malformed request ================================================= PROGRAM: Xitami HOMEPAGE: http://www.xitami.com VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= LiteServe is a very powerful, full-featured,...
CVE-2003-0731
CiscoWorks Common Management Foundation CMF 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter...
CVE-2003-0149
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...
CVE-2003-0616
CVE-2003-0616 is a format-string vulnerability in the McAfee ePolicy Orchestrator (ePO) server, affecting versions 2.0, 2.5, and 2.5.1. The issue resides in the ComputerList parameter where a POST request containing format specifiers is logged when a name resolution fails, potentially enabling re...
Microsoft Windows Media services buffer overflow
Buffer overflow on oversized POST request...
CVE-2003-0218
Buffer overflow in PostMethod function for Monkey HTTP Daemon monkeyd 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body...
CVE-2003-0218
Buffer overflow in PostMethod function for Monkey HTTP Daemon monkeyd 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body...
Buffer overflow in SonicWall
Buffer overflow on oversized POST request...
SonicWall Pro DoS?
Came across an apparent problem on a SonicWall Pro running firmware version 6.4.0.1 ROM version 5.0.1.0 during a vulnerability assessment and couldn't find any other postings on this problem so fwiw.. the problem occurs when sending a large HTTP POST to the inside interface - may affect others ju...
Monkey HTTPD buffer overflow
Buffer overflow on POST request...
[UNIX] Monkey HTTP Daemon Remote Buffer Overflow
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...
monkeyHTTPd.txt
Monkey HTTP Daemon Remote Buffer Overflow ABSTRACT "Monkey is a Web server written in C that works under Linux. This is an open source project based on the HTTP/1.1 protocol. The objective is to develop a fast, efficient, small and easy to configure web server." quote from...
CVE-2003-0181
Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...
CVE-2003-0180
Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...
CVE-2003-0180
Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...
CVE-2002-2258
Moby NetSuite allows remote attackers to cause a denial of service crash via an HTTP POST request with a 1 large integer or 2 non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call...
CVE-2002-1663
The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...