MS09-020 IIS6 WebDAV Unicode Authentication Bypass

This module attempts to to bypass authentication using the WebDAV IIS6 Unicode vulnerability discovered by Kingcope. The vulnerability appears to be exploitable where WebDAV is enabled on the IIS6 server, and any protected folder requires either Basic, Digest or NTLM authentication. This module...

Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007; CVE-2003-0109)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...

Microsoft IIS WebDAV XML Message Handler Denial of Service (MS04-030; CVE-2003-0718)

The WebDAV protocol Web-based Distributed Authoring and Versioning is an extension to HTTP/1.1 that provides a capability for web page authoring over HTTP. The Microsoft WebDAV component is provided with Microsoft Internet Information Services Server IIS in order to provide support for WebDAV. Th...

Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

DEBIAN-CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

Directory traversal

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3898

The CVE-2009-3898 issue affects nginx (Engine X) in the WebDAV module (src/http/modules/ngx_http_dav_module.c). A directory traversal flaw via the Destination header in COPY or MOVE can allow remote authenticated users to create or overwrite arbitrary files. Affected versions are nginx before 0.7...

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

SLES9: Security update for webdav apache module

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: moddav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013988 within the SuSE...

SLES9: Security update for webdav apache module

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: moddav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013988 within the SuSE...

nginx WebDAV Multiple Directory Traversal Vulnerabilities

The 'nginx' program is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings '../' to overwrite arbitrary files outside the root directory. These issues...

nginx WebDAV Multiple Directory Traversal Vulnerabilities

nginx is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

RedHat Security Advisory RHSA-2009:1452

The remote host is missing updates announced in advisory RHSA-2009:1452. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections,...

RedHat Security Advisory RHSA-2009:1452

The remote host is missing updates announced in advisory RHSA-2009:1452. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections,...

WS_FTP FTPD "STAT"command overflow parsing-vulnerability warning-the black bar safety net

The following analysis is based on the WSFTP Server 4.0.1. EVAL 4 7 1 5 6 3 1 4version, only the analysis of the“STAT”command overflow . In fact, WSFTP in processing STAT command, many places are length of the judgment, however, there is a place he has been missed, Well, our chance came.:...

nginx WebDAV目录遍历漏洞

BUGTRAQ ID: 36490 nginx是多平台的HTTP服务器和邮件代理服务器。 nginx可以用作webdav发布服务器，通过webdav用户可以将文件从一个位置拷贝或移动到另一个位置。MOVE或COPY方式需要使用包含有放置文件位置信息的Destination: HTTP头。如果在这个头中使用“../”等字符，攻击者就可以遍历目录树，将文件放置在webroot之外。 nginx默认以nobody用户权限运行，因此这个bug并不严重，因为攻击者仅允许向/tmp/或属于nobody的目录写入文件。此外，攻击还需要webdav的upload权限。 Igor Sysoev nginx...