587 matches found
CVE-2003-0621: Undefined Security Weakness
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument...
NETGEAR Router Default Password (password) for 'admin' Account
This NETGEAR Router/Access Point has the default password set for the web administration console 'admin'/'password'. This console provides read or write access to the router's configuration. An attacker can take advantage of this to reconfigure the router and possibly re-route traffic...
CVE-2002-1081
The CVE-2002-1081 entry concerns Abyss Web Server 1.0.3. Affected component: the Administration console. Root cause: remote authentication bypass allows reading files by issuing an HTTP request to a target file whose path ends with a "+" character. Impact: unauthorized disclosure of files without...
CVE-2002-1081: Undefined Security Weakness
The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character...
CVE-2002-1080
The CVE-2002-1080 entry affects Abyss Web Server 1.0.3 prior to Patch 2. Remote attackers can gain privileges and modify server configuration through direct requests to CHL files (srvstatus.chl, consport.chl, general.chl, srvparam.chl, advanced.chl). The available sources confirm the affected pro...
CVE-2002-1080: Undefined Security Weakness
The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as 1 srvstatus.chl, 2 consport.chl, 3 general.chl, 4 srvparam.chl, and 5 advanced.chl...
Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration
source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...