672 matches found
CVE-2004-1897
The CVE describes a denial-of-service (segmentation fault) in Monit versions 1.4–4.2 triggered by sending a Basic Authentication request without a password. The underlying issue is a null pointer dereference leading to an out-of-bounds read when Monit decrements a null pointer. Affected software:...
CVE-2004-1899
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...
CVE-2004-1897: Undefined Security Weakness
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service segmentation fault by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read...
CVE-2004-1898: Undefined Security Weakness
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...
CVE-2004-2045: Undefined Security Weakness
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...
CVE-2004-1899: Undefined Security Weakness
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes...
CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...
CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username...
Multiple MyWebServer bugs
DoS, administration interface protection bypass...
CVE-2002-1147: Undefined Security Weakness
The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the devicereset...
CVE-2004-0610
CVE-2004-0610 affects the Web administration interface of the Microsoft MN-500 Wireless Router. The issue allows remote attackers to cause a denial of service (connection refusals) by establishing a large number of open HTTP connections. The available documents do not specify the underlying cause...
LinkSys Wireless-G administrative access
Web administration interface is available from external network even if turned off administratively...
IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting
IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a...
IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting
source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a malicious link to the server, which when followed will be rendered in the vict...
Nokia IPSO crossite scripting
Crossite scripting in web administration interface...
Unauthorized FTGate access
It's possible to access administration interface without authentication...
D-Link DI-704P - Long URL Denial of Service
D-Link DI-704P - Long URL Denial of Service source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave ...
CVE-2003-0377
The CVE-2003-0377 entry concerns iisPROTECT (versions 2.2-r4 and earlier) and is triggered by an SQL injection in the web-based administration interface. The root cause is a vulnerability in how certain variables, notably GroupName on SiteAdmin.ASP, are processed, enabling remote attackers to inj...