CVE-2002-0578

Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long 1 user name or 2 password...

CVE-2002-0291

Dino's Webserver 1.2 allows remote attackers to cause a denial of service CPU consumption and possibly execute arbitrary code via several large HTTP requests within a short time...

Lysias Lidik Webserver suffers from a Directory Traversal Vulnerability

------------------------------------------------------------ itcp advisory 14 [email protected] http://www.it-checkpoint.net/advisory/14.html May 8th, 2002 - ------------------------------------------------------------ Lysias Lidik Webserver suffers from a Directory Traversal...

Directory traversal in Lysias Lidik Webserver

No description provided...

WorldClient 5.0.x - Arbitrary File Deletion

source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the webserver that it resides on. The...

CVE-2002-0291

Dino's Webserver 1.2 is affected by CVE-2002-0291. The vulnerability allows remote attackers to cause a denial of service (CPU consumption) and potentially execute arbitrary code by sending several large HTTP requests in a short period. The commonly cited impact is partial availability compromise...

CVE-2002-0323

comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL...

CVE-2001-1337

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2002-0323

The CVE-2002-0323 issue affects ScriptEase:WebServer . A vulnerability in how the target file is passed in the URL allows remote attackers to read arbitrary files, yielding potential partial confidentiality impact. The NVD entry lists a base score of 5.0 (Medium) with network access and no authen...

CVE-2001-1337

The CVE-2001-1337 entry concerns Beck IPC GmbH IPC@CHIP Embedded-Webserver. Reported impact is a remote denial of service triggered by a long HTTP request. The available information does not specify affected versions, exact vulnerable component or root cause details, nor any published exploitable...

Buffer overflow and directory traversal in 4D webserver

No description provided...

iXsecurity.20020404.4d_webserver.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020404.4dwebserver.a ================================== Vulnerability Summary --------------------- Problem: The 4D webserver has a buffer overflow condition. Threat: An attacker could make the webserver crash and possibly execute arbitrar...

KPMG-2002012: Sambar Webserver Serverside Fileparse Bypass

-------------------------------------------------------------------- -=Sambar Webserver Serverside Fileparse Bypass=- courtesy of KPMG Denmark BUG-ID: 2002012 Released: 17th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the serverside UR...

[NT] Sambar Webserver Serverside Fileparse Bypass

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

iXsecurity.20020327.tivoli_tsm_dsmcad.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020327.tivolitsmdsmcad.a =========================================== Vulnerability Summary --------------------- Problem: The Tivoli Storage Manager webserver, running on port 1581 has a buffer overflow condition. Threat: An attacker could...

iXsecurity.20020314.csadmin_fmt.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020314.csadminfmt.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a format string vulnerability. Threat: An attacker could send an "invalid" URL to the webserve...

CVE-2002-0111

Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. dot dot in the URL...

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution source: https://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...