NaviCOPA Web Server Source Code Disclosure Vulnerability

The host is running NaviCOPA Web Server and is prone to Source Code Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbnavicopaserverinfodiscvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ NaviCOPA Web Server Source Code Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

httpdx 1.5 'Space Character' Remote File Disclosure Vulnerability

httpdx is prone to a remote file disclosure vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CoreHTTP CGI Support Remote Command Execution Vulnerability

CoreHTTP is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. CoreHTTP 0.5.3.1 is vulnerable; other versions may also be affected. OpenVAS...

Botnets Targeting Full Spectrum of Servers

Web servers, FTP servers, and even SSL servers are becoming prime targets for botnet operators, not as command and control servers or as pure zombies, but more as a place to host their malicious code and files, or in some cases to execute high-powered spam runs. Read the full article. Dark Readin...

Monkey HTTP Server < 0.9.3 Invalid HTTP 'Connection' Header DoS Vulnerability

Monkey HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

iWeb Server URL Directory Traversal Vulnerability

iWeb Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to access files outside of the web servers root directory. Successfully exploiting this issue will allow attackers to ga...

CoreHTTP 'src/http.c ' Buffer Overflow Vulnerability

CoreHTTP is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Polipo Malformed HTTP GET Request Memory Corruption Vulnerability

Polipo is prone to a memory-corruption vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Polipo Malformed HTTP GET Request Memory Corruption Vulnerability

Polipo is prone to a memory-corruption vulnerability. Successful exploits may allow remote attackers to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users. Polipo 0.9.8 and 1.0.4 are vulnerable; other versions may al...

Xerver <= 4.32 HTTP Response Splitting Vulnerability

Xerver is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

New Wordpress Update Thwarts Malware

The WordPress developers have released security update 2.8.6 to fix two vulnerabilities. WordPress users are advised to install the update as soon as possible if untrusted authors can add content and upload images. At least one of the bugs allows attackers to inject and execute arbitrary PHP code...

Broken Web Servers

The remote web server seems password protected or misconfigured. Further tests on it were disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42799; scriptversion"$Revision: 1.5 $"; scriptcvsdate"$Date: 2011/08/17 16:19:4...

Web Security Flaws Up 10% in 2009

Almost 80% of more than 3,000 software security flaws publicly reported so far this year have been in Web technologies such as Web servers, applications, plugins and Web browsers. That number is about 10% higher than the number of flaws reported in the same period last year — and nine out of 10 o...

nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability

The 'nginx' program is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result i...

CGI Generic Tests Load Estimation (all tests)

This script computes the maximum number of requests that would be done by the generic web tests, depending on miscellaneous options. It does not perform any test by itself. The results can be used to estimate the duration of these tests, or the complexity of additional manual tests. Note that the...

nginx HTTP Request Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2009-3264

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG...

http-malware-host NSE Script

Looks for signature of known server compromises. Currently, the only signature it looks for is the one discussed here: . This is done by requesting the page /ts/in.cgi?open2 and looking for an errant 302 it attempts to detect servers that always return 302. Thanks to Denis from the above link for...

Apache Shows How to Handle a Network Compromise

The Apache Software Foundation last week was the victim of a serious network attack in which a number of its Web servers and other machines were compromised by attackers who were able to gain root privileges and jump from machine to machine. The incident was embarrassing and a serious problem for...