myServer POST Denial of Service

The remote host is running myServer, an open-source http server. This version is vulnerable to remote denial of service attack. With a specially crafted HTTP POST request, an attacker can cause the service to stop responding. OpenVAS Vulnerability Test $Id: myserverpostdos.nasl 8023 2017-12-07...

JRun directory traversal

This host is running the Allaire JRun web server. Versions 2.3.3, 3.0, and 3.1 are vulnerable to a directory traversal attack. This allows a potential intruder to view the contents of any file on the system. OpenVAS Vulnerability Test $Id: DDIJRunTraversal.nasl 6046 2017-04-28 09:02:54Z teissa $...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

Webserver4everyone too long URL

It may be possible to make Webserver4everyone execute arbitrary code by sending it a too long url with the Host: field set to 127.0.0.1 OpenVAS Vulnerability Test $Id: ws4etoolongurl.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Webserver4everyone too long URL Authors: Michel Arboi...

Veritas Backup Exec Agent 8.x9.x - Browser Overflow

Veritas Backup Exec Agent 8.x9.x - Browser Overflow / Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to:...

directory traversal bug in Pserv 3.0b2

Donato Ferrante Application: PSERV - the small web server http://sourceforge.net/projects/pserv Version: 3.0 beta 2 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

Vulnerability in WebCollection Plus (TM)

These vulnerabilities were found / tested on: WebCollection Plus TM Copyright 2001 Follett Software Company Version 5.00 Revision 12-01-A Dec 19 2001 Program protects from reading other non-webserver accessible files by checking for a : or excessive .'s in a string. If the URL has a / at the...

pam_unix_passwd.so.txt

Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...