Xerver 4.32 Source Disclosure / HTTP Auth Bypass

Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file is derived from part of the Metasploit Framework and may be subject t...

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

No description provided by source. Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file is derived from part of the...

Xerver <= 4.32 Multiple Vulnerabilities

Xerver is prone to multiple vulnerabilities including source code disclosure, denial of service, security bypass, and directory traversal issues. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Xerver Multiple Vulnerabilities

Xerver is prone to multiple vulnerabilities including source code disclosure, denial of service, security bypass, and directory- traversal issues. Successfully exploiting these issues may allow an attacker to disclose sensitive information, bypass certain security-restrictions, perform...

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

Exploit for windows platform in category remote exploits ============================================================ Xerver 4.32 Source Disclosure and HTTP Authentication Bypass ============================================================ Exploit Title: Xerver Source Disclosure and HTTP Auth...

Xerver 4.32 - Source Disclosure / HTTP Authentication Bypass (Metasploit)

Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file is derived from part of the Metasploit Framework and may be subject t...

Xerver 4.32 - Source Disclosure HTTP Authentication Bypass (Metasploit)

Xerver 4.32 - Source Disclosure HTTP Authentication Bypass Metasploit Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass Date: 01 Aug 2010 Author: Ben Schmidt aka supernothing Software: http://www.javascript.nu/xerver/ Version: 4.32 and prior Tested on: Windows XP SP3 CVE: N/A This file...

Xerver HTTP Server Web Administration Denial of Service Vulnerability

This host is running Xerver HTTP Server and is prone to the Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxerverhttpserverwebadmindosvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Xerver HTTP Server Web Administration Denial of Service Vulnerability Authors: Veerendra GG...

Xerver HTTP Server Web Administration <= 4.32 DoS Vulnerability

Xerver HTTP Server is prone to a denial of service DoS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2009-4657

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1...

CVE-2009-4658

Xerver 4.32 allows remote authenticated users to cause a denial of service daemon crash via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657...

Code injection

Xerver 4.32 allows remote authenticated users to cause a denial of service daemon crash via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657...

Authentication flaw

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1...

CVE-2009-4657

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1...

CVE-2009-4658

Xerver 4.32 allows remote authenticated users to cause a denial of service daemon crash via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657...

CVE-2009-4657

CVE-2009-4657 affects the Xerver 4.32 administrator package. The vulnerability allows remote attackers to alter application settings because authentication is not required when connecting to the application on port 32123, demonstrated by setting the action option to wizardStep1. The vulnerability...

CVE-2009-4658

CVE-2009-4658 affects Xerver HTTP Server 4.32. The issue is a denial-of-service (daemon crash) caused by a non-numeric web port assignment in the management interface. The description notes that this can be leveraged by non-authenticated attackers using CVE-2009-4657. Connected references also de...

CVE-2009-4658: Improper Input Validation

Xerver 4.32 allows remote authenticated users to cause a denial of service daemon crash via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657...

CVE-2009-4657: Improper Authentication

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1...

CVE-2009-4086

CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information...