Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (1)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (2)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (3)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (5)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (6)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (1)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 1 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Apache HTTP Server on Win32 systems does not securely handle input passed to CGI programs

Overview A vulnerability in the Apache HTTP Server running on Win32 systems Windows 9x/Me, Windows NT/2000/XP could allow an attacker to execute commands with the privileges of the web server process. Description The Apache HTTP Server is a freely available web server that runs on a variety of...

Apache.Win32.txt

Vulnerability in Apache for Win32 batch file processing - Remote command execution = Author: Ory Segal, Sanctum inc. http://www.sanctuminc.com = Release date: March, 21st 2002 Vendor was notified at: Feb. 13th 2002 = Vendor: Apache group = Product: Apache web server Win32 - Running DOS batch file...

CVE-2002-0061

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters a | pipe character provided as arguments to batch .bat or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe...

Vulnerability in Apache for Win32 batch file processing - Remote command execution

Vulnerability in Apache for Win32 batch file processing - Remote command execution = Author: Ory Segal, Sanctum inc. http://www.sanctuminc.com = Release date: March, 21st 2002 Vendor was notified at: Feb. 13th = 2002 = Vendor: Apache group = Product: Apache web server Win32 - Running DOS batch...

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution source: https://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary...

Code execution in Win32 Apache via .bat files

If server uses .bat files as CGI it's possible to execute any shell commands by using pipes...

CVE-2002-0100

CVE-2002-0100 affects AOLserver 3.4.2 on Win32. The vulnerability allows remote attackers to bypass authentication and read password-protected files by requesting a URL that directly references the protected file. The CVSS metrics indicate network access, low attack complexity, and no authenticat...

Apache Httpd < 1.3.24 : Win32 Apache Remote command execution

Apache for Win32 before 1.3.24 and 2.0.34-beta allows remote attackers to execute arbitrary commands via parameters passed to batch file CGI scripts...

Apache Win32 ScriptAlias php.exe Arbitrary File Access

A configuration vulnerability exists for PHP.EXE cgi running on Apache for Win32 platforms. It is reported that the installation text recommends configuration options in httpd.conf that create a security vulnerability, allowing arbitrary files to be read from the host running PHP. Remote users ca...

Apache Httpd < 1.3.22 : Requests can cause directory listing to be displayed

A vulnerability was found in the Win32 port of Apache 1.3.20. A client submitting a very long URI could cause a directory listing to be returned rather than the default index page...

CVE-1999-1440

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is...

Apache Httpd < 1.3.20 : Denial of service attack on Win32 and OS2

A vulnerability was found in the Win32 and OS2 ports of Apache 1.3. A client submitting a carefully constructed URI could cause a General Protection Fault in a child process, bringing up a message box which would have to be cleared by the operator to resume operation. This vulnerability introduce...

FORW: [ANNOUNCE] Apache 1.3.19 Released

Perhaps I missed it, but I don't recall seeing this vulnerability discussed on Bugtraq. They don't make it clear which pre-1.3.19 versions of Apache are affected. I've emailed Martin Kraemer for clarification and will post here when/if he responds. ------- Forwarded Message Date: Mon, 12 Mar 2001...