CVE-2000-1118

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request...

Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root

Georgi Guninski security advisory 32, 2001 Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root Systems affected: Lotus Domino 5.0.5 Windows 2000 - have not tested other versions/platforms Risk: High Date: 5 January 2001 Legal Notice: This Advisory is Copyright c 2000...

Input validation error in quikstore.cgi allows attackers to execute commands

Overview The quikstore shopping cart script contains an input validation error that allows attackers to execute commands on affected web servers. Description The quikstore.cgi script is written in Perl and provides its users with shopping cart software for e-commerce transactions. In November 200...

CVE-2000-1098

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request...

BOA Web Server 0.94.8.2 - Arbitrary File Access

ID: S21SEC-005-en Title: Vulnerability in BOA web server v0.94.8.2 Date: 03/10/2000 Status: Vendor contacted, patch available Scope: Arbitrary file access Platforms: Unix Author: llmora Location: http://www.s21sec.com/en/avisos/s21sec-005-en.txt Release: Public S 2 1 S E C http://www.s21sec.com...

Update: Microsoft Security Bulletin (MS00-086)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-086 - -------------------------------------- Patch...

Small HTTP Server 2.0 1 - Non-Existent File Denial of Service

source : https://www.securityfocus.com/bid/1941/info Small HTTP Server is a full service web server. This utility is less than 30Kb and requires minimal system resources. Small HTTP Server is subject to a denial of service. When making an http request without a filename specified the server will...

Unify eWave ServletExec 3.0 c - Denial of Service

source: https://www.securityfocus.com/bid/1868/info Unify eWave ServletExec is a Java/Java Servlet engine plug-in for major web servers such as Microsoft IIS, Apache, Netscape Enterprise Server, etc. eWave ServletExec is susceptible to a denial of service attack if a URL invoking the ServletExec...

CVE-2000-0774

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root...

Заткнута дырка в IIS (File Permission Canonicalization, Web Server Folder Traversal)

При определенных условиях со специальным образом сконструированной URL доступ к файлу может быть произведен с разрешениями на директорию, вместо разрешений на файл. Кроме того, можно обратиться к любому файлу на диске используя unicode-кодирование в URL...

Bytes Interactive Web Shopper shopper.cgi Traversal Arbitrary File Access

The remote host contains is running Byte's Interactive Web Shopper, a shopping cart application. The installed version allows for retrieval of arbitrary files from the web server. %NASLMINLEVEL 70300 This script was written by Thomas Reinke See the Nessus Scripts License for details Changes by...

SuSE Linux 6.36.4 - Installed Package Disclosure

SuSE Linux 6.36.4 - Installed Package Disclosure source: https://www.securityfocus.com/bid/1707/info By submitting a specific url to the web server "http://hosts.any/doc/packages/" , any user from any host may obtain a list of packages installed on a S.u.S.E 6.3 or 6.4 system. This problem is due...

Sambar Server ISAPI Search Utility search.dll Arbitrary Directory Listing

The 'search.dll' CGI that comes with Sambar server can be used to obtain a listing of the remote web server directories even if they have a default page, such as index.html. This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the...

Web Server HTTP Authorization Header Remote Overflow

It may be possible to make the web server crash or execute arbitrary code by sending it an authorization string which is too long. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists This is more of a generic test...

websitepro.txt

Sender: Bugtraq List From: Crono Subject: WebServer Pro 2.3.7 Vulnerability To: [email protected] -- WebSite Pro 2.3.7 Vulnerability -- WebSite Pro is a Web Server for Win95/98/NT plataforms. The vulnerability or bad server administration allow any user to create arbitrary files with...

nai net tools pki server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/1537/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a vulnerability which allows remote attackers to read any file in the system which the PKI server resides. The problem lies within the webserv...

Multiple Web Server ~nobody/ Request Arbitrary File Access

It is possible to access arbitrary files on the remote web server by appending nobody/ in front of their name as in nobody/etc/passwd. This problem is due to a misconfiguration in the web server that sets 'UserDir' or its equivalent to './'. C Tenable Network Security, Inc. include"compat.inc";...

CVE-2000-0622

Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

Computer Software Manufaktur Alibaba 2.0 - Denial of Service // source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 =============================== Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases...