81 matches found
Directory traversal
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
CVE-2010-3306
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
CVE-2010-3306
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
CVE-2010-3306
Vulnerability summary (CVE-2010-3306) : A directory traversal flaw exists in the Weborf project, in the modURL function of instance.c, affecting versions prior to 0.12.3. An attacker can read arbitrary files by crafting a URI containing ..%2f sequences. This is a remote, unauthenticated issue tha...
CVE-2010-3306
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
CVE-2010-3306: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...
Weborf 0.12.2 Directory Traversal
Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf httpd = 0.12.2 suffers a directory...
Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability
Weborf is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks. Weborf...
Weborf <= 0.12.2 Directory Traversal Vulnerability
Exploit for windows platform in category remote exploits ================================================== Weborf = 0.12.2 Directory Traversal Vulnerability ================================================== Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author:...
weborf 0.12.2 - Directory Traversal
weborf 0.12.2 - Directory Traversal Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf...
Weborf Directory Traversal Vulnerability (Sep 2010)
Weborf is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
weborf 0.12.2 - Directory Traversal
Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf httpd = 0.12.2 suffers a directory...
Weborf HTTP Server 0.12.1 Denial Of Service
DCA-0012 Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web server written in C. It supports IPv6 and basic authentication. It doesn't implement the full HTTP specification, but can be used to easily share directories or files. Bug Description - Weborf HTTP...
Weborf服务器HTTP头远程拒绝服务漏洞
BUGTRAQ ID: 41064 Weborf是用C编写的轻型Web服务器。 Weborf服务器没有正确地处理HTTP请求头Connection:字段中的unicode字符，远程攻击者可以通过发送恶意HTTP请求导致服务器终止。 Galileo Students Team Weborf 0.12.1 厂商补丁： Galileo Students Team --------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://freshmeat.net/projects/weborf/releases/318531...
CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
DEBIAN-CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
Code injection
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
CVE-2010-2435
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service crash via Unicode characters in a Connection HTTP header, and possibly other headers...
CVE-2010-2435
CVE-2010-2435 affects Weborf HTTP Server versions 0.12.1 and earlier. The vulnerability arises from how the server processes Unicode characters in HTTP headers (notably the Connection header), allowing remote attackers to trigger a crash and cause a denial of service. The available connected docu...