CVE-2003-1337

CVE-2003-1337 affects Aprelium Abyss Web Server 1.1.2 and earlier, with a heap-based buffer overflow triggered by a long HTTP GET request that could allow remote code execution. Affected versions are supported by sources noting vulnerabilities in versions earlier than 1.1.6; remediation is upgrad...

CVE-2003-1337

Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2003-1338

CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header...

Immunity Canvas: ABYSS

Name| abyss ---|--- CVE| CVE-2003-1337 Exploit Pack| CANVAS Description| abyss Notes| References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html CVE Name: CVE-2003-1337 VENDOR: Aprelium Notes: None Date public: 06/29/03 CERT Advisory: None CVE Url:...

CVE-2002-0543

Directory traversal vulnerability in Aprelium Abyss Web Server abyssws before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. dot dot sequences in the HTTP request...

CVE-2002-0543

The vulnerability affects Aprelium Abyss Web Server (abyssws) prior to version 1.0.0.2. It is a directory traversal flaw that allows remote attackers to read files outside the web root by supplying URL-encoded .. sequences in the HTTP request, potentially exposing sensitive files such as abyss.co...

CVE-2002-0544

CVE-2002-0544 affects Aprelium Abyss Web Server (abyssws) before 1.0.3. The administrative console password is stored in plaintext in the abyss.conf file, allowing local users who can access the file to gain privileges. The connected documents provide the vulnerability description but do not spec...