Webserver 4D Plaintext Password Storage

According to its Server response header, the remote web server is Webserver 4D 3.6 or lower. Such versions store all usernames and passwords in plaintext in the file 'Ws4d.4DD' in the application's installation directory. A local attacker can exploit this flaw to gain unauthorized privileges on...

Buffer overflow in WebServer 4 Everyone

Buffer overflow on oversized GET request...

CVE-2002-1213

RadioBird Software WebServer 4 Everyone versions 1.23 and 1.27 (and earlier than 1.30) contain a directory-traversal vulnerability that lets remote attackers read arbitrary files via HTTP requests containing dot-dot sequences with URL-encoded forward slashes (%2F). Root cause: improper validation...

CVE-2002-1212

CVE-2002-1212 affects RadioBird Software WebServer 4 Everyone versions prior to 1.30. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to crash the server (DoS). Public details in NVD/NVD-related OpenVAS entries confirm a remote DoS via overly...

iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.15.02: http://www.idefense.com/advisory/10.15.02.txt DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone October 15, 2002 I. BACKGROUND RadioBird Software's WebServer 4 Everyone is a free "Powerful,...

Multiple Symantec Firewall Secure Webserver timeout DoS

Advanced IT-Security Advisory 01-10-2002 http://www.ai-sec.dk/ Issue: ====== Multiple Symantec Firewall Secure Webserver timeout DoS Problemdescription: =================== There exists a problem in "Simple, secure webserver 1.1" which is shipped with numerous Symantec firewalls, in which an...

Webserver 4D weak encryption

Passwords are stored in cleartext...

[SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Webserver 4D v3.6 Weak Password Preservation Vulnerability -- - -- Type Design Error - -- Release Date September 25, 2002 - -- Product / Vendor Webserver 4D by MDG Computer Services, Inc. is an complete Web Server environment written entirely on t...

ghttpd 1.4.x - 'Log()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/5960/info A buffer overflow has been reported in ghttpd which will allow arbitrary code to be executed with the privileges of the webserver. The overflow occurs when the argument to a 'GET' request is of excessive length. It is a stack-based overflow...

phpMyNewsletter 0.6.10 - Remote File Inclusion

source: https://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow an attacker to execute arbitrary commands with...

idefense.dinoweb.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 09.23.2002 Directory Traversal in Dino's WebServer DESCRIPTION A vulnerability exists in the latest version of Dino’s Webserver that can allow an attacker to view and retrieve any file on the system. The Common Vulnerabiliti...

Savant 3.1 multiple vulnerabilities

Auriemma Luigi, PivX security advisory Application: Savant webserver http://savant.sourceforge.net Version: 3.1 and possibly previous versions Bug: Buffer overflow in cgitest, crash with negative Content-Length and bad chars usage Risk medium: Remote DoS and authorization bypassing the risk is...

advisory

----------- UkR security team advisory ------------ Dino's WebServer 1.2 directory traversal bug ----------------------------------------------------- Name: Dino's WebServer 1.2 directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: Dino's...

advisory

----------- UkR security team advisory ------------ WebServer 4 Everyone directory traversal bug ----------------------------------------------------- Name: WebServer 4 Everyone directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: WebServer 4...

Super Site Searcher - Remote Command Execution

Super Site Searcher - Remote Command Execution source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The...

Super Site Searcher - Remote Command Execution

source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The parameters are then used in a function which passes...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error page...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. As a result, when an innocent user follows such a link,...

Abyss 1.0.3 directory traversal and administration bugs

Auriemma Luigi, PivX security advisory Application: Abyss webserver http://www.aprelium.com Version: 1.0.3 patch 2 and previous, both Windows and Linux, patch 2 fix the administration bug Bug: Directory traversal and administration bugs Risk high: An attacker can view every file in the remote...

Apache Tomcat 4.1 Cross-Site Scripting Vulnerability

This writing is part of Malloc Hackers & Malloc Security http://www.malloc.tk http://www.superw00t.com Title: Apache Tomcat 4.1 Cross-Site Scripting Vulnerability Author: Skinnay of Malloc Contact: "Skinnay" - [email protected] No modification of the contents of this file should be made without...