monkeyHTTPd.txt

Monkey HTTP Daemon Remote Buffer Overflow ABSTRACT "Monkey is a Web server written in C that works under Linux. This is an open source project based on the HTTP/1.1 protocol. The objective is to develop a fast, efficient, small and easy to configure web server." quote from...

Monkey HTTPD buffer overflow

Buffer overflow on POST request...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2002-1663

The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...

CVE-2002-2170

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...

CVE-2002-2400

Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP POST request...

CVE-2002-2258

Moby NetSuite allows remote attackers to cause a denial of service crash via an HTTP POST request with a 1 large integer or 2 non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call...

Moby NetSuite 1.01.2 - POST Handler Buffer Overflow

Moby NetSuite 1.01.2 - POST Handler Buffer Overflow source: https://www.securityfocus.com/bid/6277/info A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST...

Moby NetSuite 1.0/1.2 - POST Handler Buffer Overflow

source: https://www.securityfocus.com/bid/6277/info A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST request is received. An attacker can exploit this...

LibHTTPD 1.2 - POST Buffer Overflow

LibHTTPD 1.2 - POST Buffer Overflow // source: https://www.securityfocus.com/bid/6172/info LibHTTPD is vulnerable to a buffer overflow condition. By passing a POST request of excessive length, it is possible to overrun a static buffer. This may result in sensitive locations in memory being...

LibHTTPD 1.2 - POST Buffer Overflow

// source: https://www.securityfocus.com/bid/6172/info LibHTTPD is vulnerable to a buffer overflow condition. By passing a POST request of excessive length, it is possible to overrun a static buffer. This may result in sensitive locations in memory being overwritten by attacker-supplied values...

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can...

Monkey HTTP Server 0.4/0.5 - Invalid POST Denial of Service

source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability by issuing a POST request with an...

CVE-2002-1077

IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...

CVE-2002-1068

The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service hang via a large HTTP POST request...

CVE-2002-1087

The CVE-2002-1087 entry concerns ezContents 1.41 and earlier, where three scripts (createdir.php, removedir.php, uploadfile.php) fail to perform credential checks. This allows remote attackers to create or delete directories and upload files via a direct HTTP POST request. Documented impact is un...

CVE-2002-1068

The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service hang via a large HTTP POST request...

CVE-2002-1087

The scripts 1 createdir.php, 2 removedir.php and 3 uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request...