Re: Denial of Service in Xitami webserver all versions...

Xitami also has an overflow in one of the default example CGI programs that it comes with. http://server.com/cgi-bin/TESTCGI.EXE bla bla bla overflow argv fun. Signed, Marc eEye Digital Security http://www.eEye.com "Its a bullshit, three ring, circus sideshow. The only way to fix it is to flush i...

Denial of Service in Xitami webserver all versions up to v2.5b1 for Windows.

Anyone can remotely crash Xitami webserver by sending simple GET command. On remote side will be: Assertion Failed! Module: D:ImatixDevelopSmtSmthttpl.c , line 745 All you need to do is just telnet to remote computer and execute GETspaceenterenter command. Also Xitami will crash if you'll execute...

GeoCel WindMail 3.0 - Remote File Read

GeoCel WindMail 3.0 - Remote File Read source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any asci...

qDecoder 4.x5.x - Remote Buffer Overflow

qDecoder 4.x5.x - Remote Buffer Overflow source: https://www.securityfocus.com/bid/2329/info Improperly validated user-supplied input to the Content-Type header can create an overflow condition. As a result, excessive data copied onto the stack can overwrite critical parts of the stack frame such...

Generation Terrorists Designs Concepts Sojourn 2.0 - File Access

Generation Terrorists Designs Concepts Sojourn 2.0 - File Access source: https://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into...

Sun StarOffice 5.1 - Arbitrary File Read

Sun StarOffice 5.1 - Arbitrary File Read source: https://www.securityfocus.com/bid/1040/info StarOffice is a desktop office suite offered by Sun Microsystems. StarScheduler is a groupware server that ships with StarOffice and includes a webserver that runs as root by default. When a request it se...

Sun StarOffice 5.1 - Arbitrary File Read

source: https://www.securityfocus.com/bid/1040/info StarOffice is a desktop office suite offered by Sun Microsystems. StarScheduler is a groupware server that ships with StarOffice and includes a webserver that runs as root by default. When a request it sent to a webserver for a document, the...

zeus.null.txt

This morning Zeus Technology Limited was informed of a serious security bug in the Zeus Webserver by 'The Relay Group' http://relaygroup.com. This document describes the scope of the problem and its solution. Versions affected ----------------- Zeus 3.1.x / 3.3.x Severity -------- High- this bug...

poorman.txt

Missing traling '/' Remote Denial of Service Attack Advisory february 5th 2000 UPDATED February 8th Please, refer to http://bebugs.be.com/devbugs/detail.php3?oid=1229984 as it makes this advisory obsolete... I discovered this very recently, but it seems it was in the Be inc. bug database for a...

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service source: https://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up al...

CVE-1999-0232

CVE-1999-0232 : Affects NCSA WebServer 1.5c; a buffer overflow leads to remote access. Connected documents confirm the vulnerability but do not provide a remediation or patch details. Exploitation status is not specified in the sources.

CVE-1999-0235

CVE-1999-0235 - Details : A buffer overflow in NCSA WebServer (versions 1.4.1 and below) can allow remote access. The root cause is an overflow in the server’s handling of input, leading to arbitrary code execution or service compromise as described across connected records. Affected software: NC...

CVE-1999-0232

Buffer overflow in NCSA WebServer version 1.5c gives remote access...

CVE-1999-0235

Buffer overflow in NCSA WebServer 1.4.1 and below gives remote access...

cern-pss.txt

$%$$%$$%$$%$$%$$%$$%$$%$$%$$%$ $% CERN 3.0A Heap overflow advisory %$ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$ $% By Scrippie %$ $ Phreak.nl $ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$$ $ Love To: Maja, Dopey, Hester $ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$$ there is a heap overflow that wastes memory space in the CERN/3.0A...

AnalogX SimpleServer:WWW 1.0.1 - GET Buffer Overflow

source: https://www.securityfocus.com/bid/906/info The SimpleServer:WWW personal webserver package from AnalogX can be compromised due to an overflowable buffer. If a GET request longer than 1000 bytes is received, the software will crash and data from the request gets pased to the EIP, meaning...

BroadGun Software CamShot WebCam 2.5 - GET Buffer Overflow

source: https://www.securityfocus.com/bid/905/info CamShot is a webserver designed to work in conjunction with computer video cameras. The software will crash, and possibly allow for execution of arbitrary code, if a GET request of more than 2000 bytes is received. DoS attack: GET 2000 chars...

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buff...

Alt-N WorldClient Pro 2.0.0.0/2.0.1.0/Standard 2.0.0.0 - Long URL Denial of Service

source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buffer in the request handler. Supplying a long url will crash the server. http...

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password source: https://www.securityfocus.com/bid/806/info Certain versions of the Tektronix PhaserLink printer ship with a webserver designed to help facilitate configuration of the device. This...