AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability Type: File Disclosure Release Date: January 6, 2002 Product / Vendor: AOLserver is America Online's Open-Source web server. AOLserver is the backbone of the largest and busiest production...

Доступ к защищенным файлам в AOLServer (unauthorized access)

Под Windows можно обойти защиту файлов паролем добавив к имени файла '.'...

AOLServer contains buffer overflow in ParseAuth()

Overview AOLServer versions 3.3.0 and earlier contain an exploitable buffer overflow. This can lead to arbitrary execution of code on the system. Description AOLServer is a free open source web server. It was originally written by America Online AOL, and is currently developed and maintained by A...

AOLServer 3 - 'Authentication String' Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/3230/info AOLServer is a freely available, open source web server. It was originally written by AOL, and is currently developed and maintained by AOL and public domain. A problem has been discovered that can allow remote users to crash an AOLServer,...

AOLServer 3 - Authentication String Remote Buffer Overflow (2)

AOLServer 3 - Authentication String Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/3230/info AOLServer is a freely available, open source web server. It was originally written by AOL, and is currently developed and maintained by AOL and public domain. A problem has been...

CVE-2001-1067

Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header...

AOLserver 3.0 vulnerability

Aolserver 3.0 will crash when it is given a long authorization string. It is also possible this vulnerability will allow a hacker to execute arbitrary code through a buffer overflow. I have not verified a buffer overflow exists. Aolserver 3.4 and 3.3.1 are not vulnerable to this attack. Here is a...

AOLServer 3 - Authentication String Remote Buffer Overflow (1)

AOLServer 3 - Authentication String Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/3230/info AOLServer is a freely available, open source web server. It was originally written by AOL, and is currently developed and maintained by AOL and public domain. A problem has been...

AOLServer 3 - 'Authentication String' Remote Buffer Overflow (1)

source: https://www.securityfocus.com/bid/3230/info AOLServer is a freely available, open source web server. It was originally written by AOL, and is currently developed and maintained by AOL and public domain. A problem has been discovered that can allow remote users to crash an AOLServer, denyi...

CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. dot dot attack...

CVE-2001-0205

CVE-2001-0205 : A directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting a modified .. (dot dot) sequence ("...") into the requested pathname. The issue affects the pathname handling in AOLserver versions up to and including 3.2...

CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. dot dot attack...

Vulnerability in AOLserver

Vulnerability in AOLserver Overview AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths ie: '...'. Details AOLServer checks the requested virtual path for any double dots...

aolserver 3.2 Win32 - Directory Traversal

source: https://www.securityfocus.com/bid/2343/info It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary directory. http://target/.../file outside...

aolserver 3.2 Win32 - Directory Traversal

aolserver 3.2 Win32 - Directory Traversal source: https://www.securityfocus.com/bid/2343/info It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary...