1951 matches found
Apache Httpd < 2.0.43 : CGI scripts source revealed using WebDAV
In Apache 2.0.42 only, for a location where both WebDAV and CGI were enabled, a POST request to a CGI script would reveal the CGI source to a remote user...
CVE-2002-0422
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...
CVE-2001-0508
Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service restart via a long, invalid WebDAV request...
CVE-2001-0508
CVE-2001-0508 relates to Microsoft IIS 5.0 WebDAV processing. A very long, invalid WebDAV request can trigger a memory access error, causing the IIS 5.0 process to terminate and restart (DoS). The issue is addressed by the MS01-044 patch from Microsoft. Affected platform noted in sources is IIS 5...
CVE-2001-0508: Undefined Security Weakness
Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service restart via a long, invalid WebDAV request...
CVE-2002-0422
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...
CVE-2002-0422
CVE-2002-0422 concerns Microsoft IIS 5 and 5.1. WebDAV support can leak an internal IP address. The PROPFIND method with a blank Host header can expose the address in an HREF within a 207 Multi-Status response, and the WRITE or MKCOL methods can leak the internal IP in the Location header. Connec...
CVE-2002-0422: Exposure of Sensitive Information to an Unauthorized Actor
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...
CVE-2001-0508
Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service restart via a long, invalid WebDAV request...
CVE-2001-0238
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...
CVE-2001-0238
The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...
EUVD-2001-0238
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...
CVE-2001-0238: Undefined Security Weakness
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...
Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests
Overview Intruders can disrupt the normal operation of an IIS 5.0 server using a malicious Web Distributed Authoring and Versioning WebDAV request. Description WebDAV is an extension to HTTP used to manage content on web servers. Quoting from RFC 2518: WebDAV is an extension to the HTTP/1.1...
CVE-2001-0238
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...
CVE-2001-0151
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests...
DoS против IIS (malformed WebDav request)
Длинный запрос PROPFIND приводит к 100 загрузке процессора и утечке памяти. Запрос содержащий большое число символов ':' приводит к краху сервиса...
Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service
Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service source: https://www.securityfocus.com/bid/2736/info Microsoft IIS 5.0 is vulnerable to a denial of service attack. A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent...
def-2001-26: IIS WebDav Lock Method Memory Leak DoS
====================================================================== Defcom Labs Advisory def-2001-26 IIS WebDav Lock Method Memory Leak DoS Author: Peter Grьndl [email protected] Release Date: 2001-05-17 ======================================================================...
Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service
source: https://www.securityfocus.com/bid/2736/info Microsoft IIS 5.0 is vulnerable to a denial of service attack. A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent files via the HTTP LOCK method. This leads to a complete consumption o...