887 matches found
CVE-2000-0302
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL...
Microsoft Index Server 2.0 - '%20' ASP Source Disclosure
source: https://www.securityfocus.com/bid/1084/info Index Server can be used to cause IIS to display the source of .asp and possibly other server-side processed files. By appending a space %20 to the end of the filename specified in the 'CiWebHitsFile' variable, and setting 'CiHiliteType' to 'Ful...
CVE-1999-0253
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . dot in the URL...
CVE-1999-0286
The CVE describes a vulnerability in some NT web servers where appending a trailing space to a URL allows attackers to read the source of active pages, enabling complete confidentiality compromise. Documented by multiple sources (NVD, Red Hat, CVE list) with no publicly documented fix/version pro...
cdnow.account.access.txt
Date: Wed, 9 Jun 1999 12:24:47 +1200 From: "Derricutt, Mark" To: [email protected] Subject: Security hole found in CDNow! www.cdnow.com Last week I stumbled accross the following security hole in CDNow!, the online cd-store. I emailed CDNow! regarding this immediately but as yet have not have...