6248 matches found
Eserv Non-Terminated Connection Saturation DoS
The remote host is running Eserv HTTP/SMTP/FTP server. According to its version number, there is a memory leak in this software which allows any attacker to consume all the available memory on this host by making repeated requests to this service. C Tenable Network Security, Inc. From: "Matthew...
Ikonboard FUNC.pm lang Cookie Arbitrary Command Execution
The remote server is running IkonBoard, a forum management CGI. The installed version fails to properly sanitize the 'lang' cookie when it contains illegal characters. An attacker, exploiting this flaw, could execute arbitrary code on the remote host when the cookie is inserted into a Perl 'eval'...
12Planet Chat Server Administration Authentication Cleartext Credential Disclosure
The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...
12Planet Chat Server Error Message Path Disclosure
The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...
MDG Web Server 4D GET Request Remote Overflow
It is possible to kill the web server by sending an oversized string of '' as an argument to a GET request. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. include 'compat.inc' ;...
FTP Server root Directory .forward File Present
The remote anonymous FTP server has a .forward file set in its home. An attacker may use it to determine who is in charge of the FTP server and set up a social engineering attack. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11565; scriptversion "$Revision: 1.18 $";...
FTP Server root Directory .rhosts File Present
The remote anonymous FTP server has a .rhosts file set in its home directory. An attacker may use it to determine the trust relationships between this server and other hosts on the network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11566; scriptversion"$Revision:...
Pi3Web 2.0.1 - GET Denial of Service
// source: https://www.securityfocus.com/bid/7555/info It has been reported that Pi3Web server is prone to a denial of service vulnerability. Reportedly, when a malicious GET request is sent to the Pi3Web server the server will fail. It should be noted that the Unix version has been reported...
[NT] Twilight Utilities Denial of Service Vulnerability (TW-WebServer)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...
Chindi Server 1.0 Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================== Chindi Server 1.0 Denial of Service Exploit =========================================== / Chindi server 1.0 Denial of Service Proof of Concept by Luca Ercoli luca.ercoli at inwind.it After DoS, server...
EZ Server 1.0 - File Disclosure
EZ Server 1.0 - File Disclosure source: https://www.securityfocus.com/bid/7378/info It has been announced that EZ Server is vulnerable to a condition that may result in the disclosure of potentially sensitive information through requests that have directory traversal sequences...
EZ Server 1.0 - File Disclosure
source: https://www.securityfocus.com/bid/7378/info It has been announced that EZ Server is vulnerable to a condition that may result in the disclosure of potentially sensitive information through requests that have directory traversal sequences. http://target/../../winnt/win.ini...
PoPToP PPTP ctrlpacket.c Negative Read Remote Overflow
The remote PPTP server has remote buffer overflow vulnerability. The problem occurs due to insufficient sanity checks when referencing user-supplied input used in various calculations. As a result, it may be possible for an attacker to trigger a condition where sensitive memory can be corrupted...
PoPToP PPTP server remotely exploitable buffer overflow
Versions older than 1.1.4-b3 and 1.1.3-20030409 affected. This seems to be exploitable only with Linux. PPTP? ----- PPTP-over-IPSEC is commonly used to create VPNs. Windows plays quite nicely with it. problem ------- PPTP packet header contain 16bit length which specifies the full size of the...
Coppermine Photo Gallery 1.0 - PHP Code Injection
source: https://www.securityfocus.com/bid/7300/info Coppermine Photo Gallery has been reported prone to PHP code injection attacks. Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo Gallery, an attacker may upload a malicious JPEG. The...
CVE-2002-0318
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service CPU consumption via a flood of Access-Request packets...
CVE-2002-0897
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory...
CVE-2002-0463
ARSC (Really Simple Chat) version 1.0.1 and earlier is affected by an information disclosure vulnerability. An invalid arsc_language value allows remote attackers to cause an error message that reveals the full pathname of the web server, exposing partial confidentiality. The CVE entry notes this...