12 matches found
CVE-2021-47903: Improper Neutralization of Special Elements used in an OS Command
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...
CVE-2018-7582
WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service daemon crash via a long HTTP Accept Header to TCP port 9991...
CVE-2018-7582
WebLog Expert Web Server Enterprise 9.4 is affected by a Remote Denial of Service vulnerability triggered by a long HTTP Accept header sent to TCP port 9991, causing daemon crashes. Public writeups and the NVD entry confirm the impact is a denial of service; an exploit exists (e.g., Exploit-DB pa...
CVE-2018-7581: Incorrect Permission Assignment for Critical Resource
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions BUILTIN\Users:IDC, which allows local users to set a cleartext password and login as admin...
CVE-2018-7582: Allocation of Resources Without Limits or Throttling
WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service daemon crash via a long HTTP Accept Header to TCP port 9991...
PT-2018-18165
Name of the Vulnerable Software and Affected Versions WebLog Expert Web Server Enterprise version 9.4 Description The issue allows for a Remote Denial Of Service, causing the daemon to crash. This can be achieved by sending a long HTTP Accept Header to TCP port 9991. Recommendations For WebLog...
PT-2018-18164
Name of the Vulnerable Software and Affected Versions WebLog Expert Web Server Enterprise version 9.4 Description The issue concerns weak permissions in the ProgramDataWebLog ExpertWebServerWebServer.cfg file, allowing local users to set a cleartext password and login as admin. Recommendations Fo...
CVE-2002-1654: Undefined Security Weakness
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing withou...
CVE-2001-0327: Undefined Security Weakness
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server...
CVE-2001-0746: Undefined Security Weakness
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with 1 GETPROPERTIES, 2 GETATTRIBUTENAMES, or other methods...
