Directory traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

Scotty traceless analysis of the hackers to avoid detection of the means-vulnerability warning-the black bar safety net

Hacker's clever is not just that they know how to invadeServer, but also that they know how to disguise their attacks. Malicious attackers will use a variety of escape means to allow yourself to not be detected, so as system administrator, should also be aware of these means to cope with the...

Apache mod_rewrite LDAP URL buffer overflow

Added: 06/22/2007 CVE: CVE-2006-3747 BID: 19204 OSVDB: 27588 Background modrewrite is an Apache module which allows rule-based modification of URL requests. Problem An off-by-one buffer overflow vulnerability in modrewrite allows command execution when the escapeabsoluteuri function attempts to...

Apache mod_rewrite LDAP URL buffer overflow

Added: 06/22/2007 CVE: CVE-2006-3747 BID: 19204 OSVDB: 27588 Background modrewrite is an Apache module which allows rule-based modification of URL requests. Problem An off-by-one buffer overflow vulnerability in modrewrite allows command execution when the escapeabsoluteuri function attempts to...

Apache mod_rewrite LDAP URL buffer overflow

Added: 06/22/2007 CVE: CVE-2006-3747 BID: 19204 OSVDB: 27588 Background modrewrite is an Apache module which allows rule-based modification of URL requests. Problem An off-by-one buffer overflow vulnerability in modrewrite allows command execution when the escapeabsoluteuri function attempts to...

CVE-2007-0067: Undefined Security Weakness

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service daemon crash via requests for URLs that reference certain files...

Surfboard HTTPd 1.1.9 - Remote Buffer Overflow (PoC)

Surfboard HTTPd 1.1.9 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/9299/info It has been reported that Surfboard httpd is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The...

CVE-2001-1251

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests...

CVE-2001-1251

The CVE-2001-1251 entry concerns SmallHTTP (versions 1.204 through 3.00 beta 8). The vulnerability allows remote attackers to cause a denial of service by sending multiple long URL requests, potentially affecting availability. Documentation in the connected records confirms the affected software ...

CVE-2001-1251: Undefined Security Weakness

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests...

CVE-2002-1989

Resin 2.1.1 allows remote attackers to cause a denial of service thread and connection consumption via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp...

CVE-2001-1250: Undefined Security Weakness

vWebServer 1.2.0 allows remote attackers to cause a denial of service hang via a small number of long URL requests, possibly due to a buffer overflow...

CVE-2001-0604

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests 8Kb containing a large number of '/' characters...

CVE-2001-0604

CVE-2001-0604 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to induce a denial of service by sending URL requests (>8 KB) containing a large number of '/' characters. The issue is due to how such requests are processed, enabling a partial availability impac...

CVE-2001-0602

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated 400 URL requests for DOS devices...

CVE-2001-0604: Undefined Security Weakness

Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests 8Kb containing a large number of '/' characters...

Проблемы в proxomitron (crosssite scripting)

Можно вставить javascript в URL запроса...

CVE-2001-1251

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests...

CVE-2001-0367

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters...

def-2001-02: IBM HTTP Server Kernel Leak DoS (re-release)

====================================================================== Defcom Labs Advisory def-2001-02 IBM HTTP Server Kernel Leak DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-08 Re-release Date: 2001-03-07...