CVE-2008-6519

Xitami Web Server vulnerability CVE-2008-6519 affects Xitami 2.2a–2.5c2 (and possibly other versions). It is a format-string issue in Long Running Web Process (LRWP) requests that triggers incorrect logging code in the SMT kernel via the sendfmt function, allowing remote denial of service (daemon...

CVE-2008-6520

Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a URI that ends in 1 .ssi, 2 .shtm, or 3 .shtml,...

CVE-2008-6520

Xitami Web Server vulnerability CVE-2008-6520 affects the SSI filter in Xitami (notably version 2.5c2; other versions possibly affected). The issue consists of multiple format-string vulnerabilities that can be triggered by a URI ending in .ssi, .shtm, or .shtml, leading to denial of service (dae...

Xitami web server format string vulnerability

Format string vulnerability on SSI files handling...

[NEWS] Xitami Web Server Multiple Vulnerabilities (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Xitami Web Server v2.5c2 LRWP Processing Format String PoC

No description provided by source. / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks t...

Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)

/ PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email: [email protected] Thanks to BuzzDee for learning me how to us...

Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)

Xitami Web Server 2.5c2 - LRWP Processing Format String PoC / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug Advisory is available at: http://www.bratax.be/advisories/b013.html multiple vulnerabilities! check it out! @author: bratax @url: http://www.bratax.be/ @email:...

Xitami Web Server v2.5c2 LRWP Processing Format String PoC

Exploit for unknown platform in category dos / poc ========================================================== Xitami Web Server v2.5c2 LRWP Processing Format String PoC ========================================================== / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

This module exploits a stack buffer overflow in the iMatix Corporation Xitami Web Server. If a malicious user sends an If-Modified-Since header containing an overly long string, it may be possible to execute a payload remotely. Due to size constraints, this module uses the Egghunter technique. Th...

CVE-2007-5067

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to 1 xigui32.exe or 2 xitami.exe...

Buffer overflow

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to 1 xigui32.exe or 2 xitami.exe...

DSquare Exploit Pack: D2SEC_XITAMI

Name| d2secxitami ---|--- CVE| CVE-2007-5067 Exploit Pack| D2ExploitPack Description| 0 Day Xitami Web Server 2.5c2 Stack Overflow Notes|...

CVE-2007-5067

CVE-2007-5067 affects iMatix Xitami Web Server 2.5c2. Multiple buffer overflows allow remote attackers to execute arbitrary code by sending a long If-Modified-Since header to xigui32.exe or to xitami.exe. Reported in multiple sources (e.g., NVD, OpenVAS, PRION, Exploit-DB, MSF) with base CVSS 2.0...

Xitami Web Server 2.5 (If-Modified-Since) Remote BoF Exploit (0day)

Exploit for unknown platform in category remote exploits =================================================================== Xitami Web Server 2.5 If-Modified-Since Remote BoF Exploit 0day =================================================================== !/usr/bin/python Xitami Web Server 2.5...

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow !/usr/bin/python Xitami Web Server 2.5 If-Modified-Since 0day Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Xitami 2.5c2 / XP SP2 Polish Shellcode: Windows Execute Command calc Details:.. Module...

DOS@XitamiHTTPd

Application: Xitami Web Server Vendors: http://www.xitami.com/xiopen25.zip Version: v2.5c1 Platforms: Windows Bug: D.O.S Date: 2004-07-15 Author: CoolICE e-mail: CoolICEChina.com ================ Content: ---------------- TestCode: @echo off...

Xitami Web Server Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== Xitami Web Server Denial of Service Exploit =========================================== if '%1'=='' echo Usage:%0 target port&&goto :eof set PORT=80 if not '%2'=='' set PORT=%2 for %%n in nc.exe do if n...

Xitami Web Server - Denial of Service

Xitami Web Server - Denial of Service if '%1'=='' echo Usage:%0 target port&&goto :eof set PORT=80 if not '%2'=='' set PORT=%2 for %%n in nc.exe do if not exist %%$PATH:n if not exist nc.exe echo Need nc.exe&&goto :eof echo GET / HTTP/1.0http.tmp echo HOST: %1http.tmp echo DOShttp.tmp echo.http.t...

Xitami Web Server Denial of Service Exploit

No description provided by source. if '%1'=='' echo Usage:%0 target port&&goto :eof set PORT=80 if not '%2'=='' set PORT=%2 for %%n in nc.exe do if not exist %%$PATH:n if not exist nc.exe echo Need nc.exe&&goto :eof echo GET / HTTP/1.0http.tmp echo HOST: %1http.tmp echo DOShttp.tmp echo.http.tmp ...