4379 matches found
CVE-2000-0014
Denial of service in Savant web server via a null character in the requested URL...
Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service
Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service source: https://www.securityfocus.com/bid/897/info The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in \Logs\general.txt http ://target/%...
Michael Lamont Savant Web Server 2.0 - NULL Character Denial of Service
source: https://www.securityfocus.com/bid/897/info The Savant Webserver cannot properly handle null characters in a GET request. If it encounters one, it will crash. The failure is logged in \Logs\general.txt http ://target/%00/...
CVE-1999-1357
Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...
bitchx-dns-oddities.txt
--- PREFACE --- About month ago, I found interesting problem with ircd up to 2.9.5 I haven't newer versions. This bug ? partially affects irc clients, including nice NULL-pointer fault in BitchX-74p4 latest release... But, let's start from the beginning: RFC 1035, "DOMAIN NAMES - IMPLEMENTATION A...
FPSC-IRCD.txt
The FPSC-IRCD.txt advisory. --------------------------- By: syg of the FPSC @3/7/98 [email protected] http://FPSC.hemp.net Program affected: IRCD Versions affected: All hybrid and other EFnet IRCD versions. Probably others. Problem: According to the date of this file, thier is a few bugs in hybr...
iParty-DoS.txt
Date: Mon, 30 Nov 1998 21:46:52 -0600 From: HD Moore Reply-To: Bugtraq List To: [email protected] Subject: iParty can be shut down remotely -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iParty is an audio/text chat program for Windows. The iParty server listens on a specified port 6004 is...
http-request_method.txt
Date: Wed, 6 Jan 1999 13:16:07 -0000 From: mnemonix To: [email protected] Subject: HTTP REQUESTMETHOD flaw There is a "feature" inherent in some web servers, such as Apache 1.3.x or MS IIS, that carries mild security implications that could allow web server attacks to go unnoticed. The problem...
netscape.4.07.pref.txt
Date: Mon, 19 Oct 1998 16:25:26 +0200 From: Themag00ru To: [email protected] Subject: Netscape Communicator 4.07 - Prefs.js Reset I dont know if this is already known or not. Anyway if you put alt+0130 characters into the URL, netscape will write it into the url history in prefs.js example:...
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
WindowsNT DNS Server Character Saturation DoS
We could make the remote DNS server crash by flooding it with characters. It is likely a WindowsNT DNS server. Crashing the DNS server could allow an attacker to make your network non-functional, or even to use some DNS spoofing techniques to gain privileges on the network. C Tenable Network...
CVE-1999-1559
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D control d character, which locks other users out of the switch because it only supports one session at a time...
textcounter.pl 1.2 - Arbitrary Command Execution
textcounter.pl 1.2 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2265/info textcounter.pl is distributed through Matt's Scripts archive, and provides added features to httpd servers such as counters, guestbooks, and http cookie management. Due to insufficient checking of...
AZL-7358 CVE-1999-0163 affecting package sendmail 8.15.2-46
In older versions of Sendmail, an attacker could use a pipe character to execute root commands...
PT-1997-1070 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to the fixed version Description: The issue allows an attacker to execute root commands using a pipe character. Recommendations: For versions prior to the fixed version, update to the fixed version to resolve the issue...
PT-1996-1035 · Gnu · Bash
Name of the Vulnerable Software and Affected Versions: Bash affected versions not specified Description: The issue concerns how Bash handles characters with a value of 255, treating them as command separators. Recommendations: At the moment, there is no information about a newer version that...
FreeBSD-SA-96:02.apache
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:02 Security Advisory FreeBSD, Inc. Topic: apache httpd meta-character escaping Category: port Module: apache Announced: 1996-04-22 Affects: FreeBSD 2.0.5 and 2.1.0...
Chargen Probe Utility
Chargen is a debugging and measurement tool and a character generator service. A character generator service simply sends data without regard to the input. Chargen is susceptible to spoofing the source of transmissions as well as use in a reflection attack vector. The misuse of the testing featur...
