SimpleServer:WWW 1.0.7/1.0.8/1.13 Hex Encoded URL Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3112/info SimpleServer:WWW is a freely available HTTP daemon available from AnalogX. It is designed for simplicity of operation. A problem with the web server could allow a remote user to execute arbitrary commands, and...

AnalogX SimpleServer:WWW 1.0.1 GET Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/906/info The SimpleServer:WWW personal webserver package from AnalogX can be compromised due to an overflowable buffer. If a GET request longer than 1000 bytes is received, the software will crash and data from the reques...

AnalogX SimpleServer:WWW 1.16 Web Server Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5006/info Reportedly, version 1.16 of SimpleServer:WWW is prone to a buffer overflow vulnerability. A remote attacker is able to connect to SimpleServer via telnet and makes an invalid request to the server. This will cau...

CVE-2001-1586

Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ "%2E%2E%2F%" sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664...

CVE-2001-1586

CVE-2001-1586 affects SimpleServer:WWW 1.13 and earlier. It is a directory traversal flaw where encoded ../ sequences in requests to the cgi-bin/ directory allow remote attackers to run arbitrary commands with the server’s privileges. OpenVAS/Nessus entries describe remote command execution, conf...

CVE-2001-1586: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ "%2E%2E%2F%" sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664...

CVE-2002-0968

AnaloxX SimpleServer:WWW (version 1.16 and earlier) is affected by a buffer overflow that can be triggered by a long HTTP request method name, allowing a remote attacker to crash the server and potentially execute arbitrary code. OpenVAS/Nessus/NVD entries confirm a remote DoS vector and, in some...

CVE-2002-0968: Undefined Security Weakness

Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service crash and execute code via a long HTTP request method name...

CVE-2001-0386: Undefined Security Weakness

AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2000-0664: Undefined Security Weakness

AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack that uses the %2E URL encoding for the dots...