2168 matches found
@stake Advisory: SuSE Apache WebDAV Directory Listings (A090700-3 )
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com www.cerberus-infosec.co.uk Security Advisory Advisory Name: SuSE Apache WebDAV Directory Listings A090700-3 Release Date: 09/07/2000 Application: Apache 1.3.12 Platform: SuSE Linux 6.4 Severity: Attackers are able to retrie...
Проблемы с установкой Apache в SuSE Linux
Ошибка в файле конфигурации стандартной установки позволяет получать исходные тексты CGI-приложений. Кроме того, компонент WebDAV позволяет получать список файлов в директории...
Apache 1.3.12 - WebDAV Directory Listings
Apache 1.3.12 - WebDAV Directory Listings source: https://www.securityfocus.com/bid/1656/info WebDAV Web Distributed Authoring and Versioning is an extension of HTTP which allows users to create, edit and share documents using the HTTP protocol. A particular REQUEST METHOD, PROPFIND, allows users...
Apache 1.3.12 - WebDAV Directory Listings
source: https://www.securityfocus.com/bid/1656/info WebDAV Web Distributed Authoring and Versioning is an extension of HTTP which allows users to create, edit and share documents using the HTTP protocol. A particular REQUEST METHOD, PROPFIND, allows users to retrieve resource properties such as...
srcgrab.pl.txt
Subject: Re: Translate:f summary, history and thoughts Simple perl script exploit for the problem. Please find a simple perl script included at the bottom that exploits below described problem. ----- Original Message ----- From: "Daniel Doèekal" To: Sent: Tuesday, August 15, 2000 7:39 PM Subject:...
Translate:f summary, history and thoughts
Because Microsoft went the way of HIDING the actual mechanism of Translate:f from all of us original KB article is gone and new Security Bulletin is playing nasty game of downplaying the problem, i have decided to write follow up with sufficient information. HOW IT WORKS -------------------------...
Serve DLL via webdav server
This module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotly and execute the provided export function. The export...
