270 matches found
Apache WebDAV Module PROPFIND Arbitrary Directory Listing
The WebDAV module can be used to obtain a listing of the remote web server directories even if they have a default page such as index.html. This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the presence of files which are not...
Apache on SuSE Linux cgi-bin-sdb Request Script Source Disclosure
The directory /cgi-bin-sdb is an Alias of /cgi-bin - most SuSE systems are configured that way. This setting allows an attacker to obtain the source code of the installed CGI scripts on this host. This is dangerous as it gives an attacker valuable information about the setup of this host, or...
IBM HTTP SERVER / APACHE
I haven't seen any advisories for IBM HTTP SERVER running Apache. There is a crucial number of "/" forward slash you can use to retrieve the contents of the root directory of this particular Web Server. Using this vulnerability, you can retrieve any files or scripts running from that directory an...
CVE-1999-0107
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters...
CVE-1999-1053
guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "--"...
CVE-1999-0926
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...
mimeflood.pl
Date: Thu, 3 Sep 1998 12:34:22 +0200 From: Laurent FACQ Subject: Web servers / possible DOS Attack / mime header flooding ! /bin/perl mimeflood.pl - 02/08/1998 - L.Facq [email protected] Web servers / possible DOS Attack / "mime header flooding" looking at the apache 1.2.5 source code i found th...
pbomb.pl
Date: Mon, 22 Feb 1999 15:49:45 -0800 From: [email protected] To: [email protected] Subject: Re: Process table attack from RISKS Digest Apache is also quite vulnerable, at least to a http DOS... It's pretty easy to swamp it by opening HARDSERVERLIMIT connections. It's also usually...
