CVE-2002-2256

Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters...

CVE-2002-1828

Savant Webserver 3.1 allows remote attackers to cause a denial of service crash via an HTTP GET request with a negative Content-Length value...

PEEL 1.0b - Remote File Inclusion

PEEL 1.0b - Remote File Inclusion source: https://www.securityfocus.com/bid/6496/info PEEL is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...

Directory traversing bug in 'myServer' webserver.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- INetCop Security Advisory 2002-0x82-010 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= - Our 10th advisory does self-congratulation. Title: Directory traversing bug in 'myServer' webserver. 0x01. Description It's very useful Windows webserver that is offered by...

Apache 1.3.x + Tomcat 4.0.x4.1.x mod_jk - Chunked Encoding Denial of Service

Apache 1.3.x + Tomcat 4.0.x4.1.x modjk - Chunked Encoding Denial of Service source: https://www.securityfocus.com/bid/6320/info Apache Webserver and Tomcat are HTTP servers maintained and distributed by the Apache project. Apache Webserver and Tomcat are available for the Unix, Linux, and Microso...

Apache 1.3.x + Tomcat 4.0.x/4.1.x mod_jk - Chunked Encoding Denial of Service

source: https://www.securityfocus.com/bid/6320/info Apache Webserver and Tomcat are HTTP servers maintained and distributed by the Apache project. Apache Webserver and Tomcat are available for the Unix, Linux, and Microsoft Windows platforms. It has been reported that a denial of service exists i...

CVE-2002-1316

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue CVE-2002-1315...

CVE-2002-1315

Cross-site scripting XSS vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability i...

Remote POST Buffer Overflow vulnerability in Pserv.

======================================== INetCop Security Advisory 2002-0x82-005 ======================================== Title: Remote POST Buffer Overflow vulnerability in Pserv Pico Server. 0x01. Description Pico server is very small webserver of C language base that support several platforms...

WebServer 4 Everyone Host Field Header Buffer Overflow

The remote web server is running a version of WebServer 4 Everyone that crashes when it receives a request for a long filename 2000 bytes and the Host request header is set to '127.0.0.1'. C Tenable Network Security, Inc. Some vulnerable servers: WebServer 4 Everyone v1.28 References: From:"Tamer...

CVE-2002-1315

The CVE-2002-1315 entry describes a Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x up to SP11, allowing remote attackers to inject and execute script/HTML as the iPlanet administrator by placing the script in error logs; it may enable privilege escalation w...

CVE-2002-1315

Cross-site scripting XSS vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability i...

CVE-2002-1316

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue CVE-2002-1315...

CVE-2002-1316

CVE-2002-1316 affects iPlanet WebServer 4.x (Admin Server) up to Service Pack 11, where the dir parameter can be manipulated with shell metacharacters to execute arbitrary commands. This vulnerability, reported alongside CVE-2002-1315 (XSS), enables potential unauthorized command execution and pa...

Multiple bugs in iPlanet WebServer

Crossite scripting, administration interface code execution...

iPlanet WebServer, remote root compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: iPlanet WebServer, remote root compromise ID: NGSEC-2002-4 Application: iPlanet WebServer 4. up to SP11 Date: 11/19/2002 Status: Vendor contacted on 09/28/2002, Sun...

MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-

My first post, please bare with me. -/-About.-/- I found this problem auditing a webserver, it’s a standard bufferoverflow i guess, but i am not sure how to find all the technical information but if anyone knows what to do i would like to know, if some one have the time to send a brief mail or...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

Xeneo Webserver DoS

Request http://target.server/ causes service to crash...

CVE-2002-1212

Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service crash via a long HTTP GET request...