CVE-2004-2374

The CVE-2004-2374 entry concerns BadBlue 2.4. Affected: BadBlue 2.4. Vulnerable behavior: requesting phptest.php embeds server installation pathname in the HTML source, allowing remote disclosure of the installation path. Impact: disclosure of server location information; exact impact described i...

CVE-2004-2374

BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML...

CVE-2002-1684

The CVE-2002-1684 entry concerns a directory traversal vulnerability in Deerfield D2Gfx 1.0.2 and BadBlue Enterprise Edition 1.5.x plus BadBlue Personal Edition 1.5.6. The vulnerability allows remote attackers to read arbitrary files via a ../ traversal in the script used to read Microsoft Office...

CVE-2002-1683

Cross-site scripting XSS vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString function...

CVE-2002-1684

Directory traversal vulnerability in 1 Deerfield D2Gfx 1.0.2 or 2 BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ dot dot slash in the script used to read Microsoft Office documents...

CVE-2002-1685

CVE-2002-1685 : BadBlue Enterprise Edition and Personal Edition versions 1.7 and 1.7.2 are affected by a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI. The flaw enables an attacker to execute arbitrary script in the context of other users by injecting script via the ext.dll ISAPI ...

CVE-2002-1683

CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...

CVE-2002-1685

Cross-site scripting vulnerability XSS in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI...

CVE-2005-0595

Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...

CVE-2005-0595

Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...

CVE-2005-0595

CVE-2005-0595 is a public buffer-overflow vulnerability in BadBlue 2.55/2.5 where ext.dll overflows via a long mfcisapicommand parameter, enabling remote code execution. Public disclosures include SPL/Metasploit-era exploits (BadBlue 2.5 EXT.dll Buffer Overflow) and OSVDB/BID/CVE references; CIRC...

BadBlue ext.dll mfcisapicommand Parameter Remote Overflow

The remote host is running a version of BadBlue HTTP server that has a buffer overflow vulnerability in 'ext.dll', a module that handles HTTP requests. An unauthenticated, remote attacker can leverage this vulnerability by sending an HTTP request containing a 'mfcisapicommand' parameter with more...

BadBlue < 2.60 'GET' Request Remote Overflow

Binary data 2657.prm...

BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow

BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow / BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected version: v2.5 2.60 and below not tested Patched version: v2.61 Link: badblue.com/bbs98.exe Date: 27 February 2005 Application Risk: Severely High Internet Risk: Low...

BadBlue 2.5 Easy File Sharing Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ==================================================== BadBlue 2.5 Easy File Sharing Remote Buffer Overflow ==================================================== / BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected...

Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (2)

Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/12673/info A remote buffer overflow vulnerability affects Working Resources BadBlue. This issue is due to a failure of the application to securely copy GET request parameters int...

BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow

/ BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected version: v2.5 2.60 and below not tested Patched version: v2.61 Link: badblue.com/bbs98.exe Date: 27 February 2005 Application Risk: Severely High Internet Risk: Low Dicovery Credits: Andres Tarasco atarasco at sia.es...

Badblue Web server ext.dll buffer overflow

Buffer overflow on oversized ext.dll mfcisapicommand parameter...

BadBlue 2.55 Web Server Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ============================================== BadBlue 2.55 Web Server Remote Buffer Overflow ============================================== / Badblue 2.55 Web Server remote buffer overflow Version: BadBlue Personal Edition v2.55 Date: Dec...

Badblue HTTP Server, ext.dll buffer overflow

SIA International Security Advisory - Badblue HTTP Server, ext.dll buffer overflow Release DAte: February 26, 2005 Vendor: Working Resources Inc. http://www.badblue.com Versions Affected: Confirmed under Badblue HTTP Server v2.55 Severity: Critical Remote Code execution Summary: "BadBlue is not...