[DeepZone Advisory] Statistics Server 5.02x stack overflow (Win2k remote exploit)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Statistics Server 5.02x overflow Advisory Name: Statistics Server Live Stats Advisory Released: 00/08/10 Application: Web site traffic analyzer Severity: local/remote user can run arbitrary code with WebServer privileges Status: vendor contacted...

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted int...

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted into the request, the application will crash or can be forced to execute arbitra...

Flowerfire Sawmill 5.0.21 - File Access

Flowerfire Sawmill 5.0.21 - File Access source: https://www.securityfocus.com/bid/1402/info Sawmill is a site statistics package for Unix, Windows and Mac OS. A specially crafted request can disclose the first line of any world readable file for which the full pathname is known, for example...

CVE-2000-0113

The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...

CVE-1999-1000

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...

CVE-1999-1000

The CVE-1999-1000 entry concerns Cisco Cache Engine’s web administration interface. Affected: Cisco Cache Engine (web admin UI). What is vulnerable: remote attackers can view performance statistics via the web interface. Underlying root cause: not explicitly stated in the provided documents. Impa...

CVE-1999-0931

CVE-1999-0931 describes a buffer overflow in Mediahouse Statistics Server that allows remote attackers to execute commands over the network. The core detail across sources (NVD, CVE listings, Red Hat advisory) is that a buffer overflow exists in the Mediahouse Statistics Server, enabling arbitrar...

CVE-1999-0931

Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands...

CVE-1999-1000

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...

PT-1999-1519 · Cisco · Cisco Cache Engine

Name of the Vulnerable Software and Affected Versions: Cisco Cache Engine affected versions not specified Description: The issue allows remote attackers to view performance statistics through the web administration interface. Recommendations: At the moment, there is no information about a newer...

CVE-1999-0931

Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands...

CVE-1999-0932

Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file...

MediaHouse Software Statistics Server 4.28/5.1 - 'Server ID' Buffer Overflow

source: https://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16 character restriction, this is easily circumventible by editing the HTML to...