Explanation Authentix Input Validation Error

Hi there, Yesterday I posted an advisory concerning a bug in Authentix that would allow users to bypass authentification. When I contacted the vendor about this they were very responsive and after some emails going here and there we agreed to postpone the bugtraq-posting for two weeks and give th...

CVE-2000-0408

CVE-2000-0408 – Microsoft IIS Malformed File Extension DoS affects IIS 4.05 and 5.0. A remote attacker can trigger a denial of service by sending a long, complex URL that appears to contain a large number of file extensions (Mashed Extension Data in URL). Remediation is associated with Microsoft ...

AnalogX SimpleServer:WWW /cgi-bin/ Long GET Request DoS

It is possible to crash the remote web server by a long URL in the /cgi-bin directory. AnalogX SimpleServer is known to be affected by this flaw. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10445; scriptversion"1.32"; scriptcvsdate"Date: 2018/06/29 12:01:03";...

AnalogX SimpleServer:WWW 1.0.3 - Denial of Service

AnalogX SimpleServer:WWW 1.0.3 - Denial of Service source: https://www.securityfocus.com/bid/1076/info Requesting a URL containing a string of exactly eight characters following the /cgi-bin/ directory 17 characters in total will cause AnalogX SimpleServer:WWW to shut down. http://target/cgi-bin/...

CVE-1999-0885

Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL...

CVE-1999-0844

Denial of service in MDaemon WorldClient and WebConfig services via a long URL...

IBM Lotus Domino HTTP /cgi-bin Relative URL Request DoS

It was possible to perform a denial of service against the remote web server by sending it a long /cgi-bin relative URL. This problem allows an attacker to prevent your Lotus Domino web server from handling requests. %NASLMINLEVEL 70300 This script was written by Alain Thivillon See the Nessus...

Microsoft Internet Explorer 5 - vnd.ms.radio URL

Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 vnd.ms.radio URL Vulnerability source: https://www.securityfocus.com/bid/861/info Internet Explorer can handle URLs of type vnd.ms.radio: for streaming audio content. If a URL with 360 or more characters after 'vnd.ms.radio' is specifie...

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buff...

CVE-1999-1547

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded hex equivalent...

T. Hauck Jana Server 1.01.451.46 - Directory Traversal

T. Hauck Jana Server 1.01.451.46 - Directory Traversal source: https://www.securityfocus.com/bid/699/info The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL. If the request is made in specific formats, the server will send out files outside of the...

netscape.4.07.pref.txt

Date: Mon, 19 Oct 1998 16:25:26 +0200 From: Themag00ru To: [email protected] Subject: Netscape Communicator 4.07 - Prefs.js Reset I dont know if this is already known or not. Anyway if you put alt+0130 characters into the URL, netscape will write it into the url history in prefs.js example:...