CVE-2002-1828

Savant Webserver 3.1 allows remote attackers to cause a denial of service crash via an HTTP GET request with a negative Content-Length value...

CVE-2002-1663

The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...

DEBIAN-CVE-2002-1368

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...

CVE-2002-1368

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing negative arguments to be fed into memcpy calls via HTTP requests with 1 a negative Content-Length value or 2 a negative length in a...

Null httpd Content-Length Header Handling Remote Overflow

The NullLogic Null HTTPd web server crashed when sent an invalid POST HTTP request with a negative Content-Length field. An attacker may exploit this flaw to disable your service or even execute arbitrary code on your system. C Tenable Network Security, Inc. References: Date: Sun, 22 Sep 2002...

Savant Web Server Malformed Content-Length DoS

The Savant web server on the remote host crashes when it receives an invalid GET HTTP request with a negative Content-Length field. A remote attacker can leverage this issue to disable the affected service. C Tenable Network Security, Inc. References: Date: Fri, 13 Sep 2002 19:55:05 +0000 From...

Signed/unsigned conversion bug in wwwoffled

Content-Length integer type bug...

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can...

Monkey HTTP Server 0.4/0.5 - Invalid POST Denial of Service

source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability by issuing a POST request with an...

Null HTTPd 0.5 - Remote Heap Overflow

Null HTTPd 0.5 - Remote Heap Overflow // source: https://www.securityfocus.com/bid/5774/info Null httpd is a small multithreaded web server for Linux and Windows, mantained by NullLogic. A remotely exploitable heap overflow has been discovered in Null httpd. By passing a negative content length...

Savant Web Server 3.1 - Malformed Content-Length Denial of Service

Savant Web Server 3.1 - Malformed Content-Length Denial of Service source: https://www.securityfocus.com/bid/5707/info Savant Webserver is prone to a denial of service attack, when processing a negative integer located in a users Content-Length value. It should be noted that versions below 3.1 ma...

Savant Web Server 3.1 - Malformed Content-Length Denial of Service

source: https://www.securityfocus.com/bid/5707/info Savant Webserver is prone to a denial of service attack, when processing a negative integer located in a users Content-Length value. It should be noted that versions below 3.1 may also be vulnerable to this issue. GET / HTTP/1.0 Content-Length: ...

CVE-2002-0818

wwwoffled in World Wide Web Offline Explorer WWWOFFLE allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value...

DSA-144 wwwoffle - improper input handling

Bulletin has no description...

wwwoffle-2.7b and prior segfaults with negative Content-Length value

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 QITEST1 SECURITY ADVISORY 005 wwwoffle-2.7b and prior segfaults with negative Content-Length value PROGRAM DESCRIPTION WWWOFFLE, World Wide Web Offline Explorer, is a proxy HTTP/FTP server for computers with dial-up internet access. DETAILS When...

Buffer overflow in WWW Offline Explorer

Buffer overflow on negative Content-Length...

Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow

// source: https://www.securityfocus.com/bid/5188/info The Microsoft Foundation Class Library is a library used to develop applications for Microsoft Windows. Some versions of the MFC include an ISAPI class, which can be used to construct applications which extend web server functionality...

CVE-2002-0440

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients...

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass // source: https://www.securityfocus.com/bid/4265/info Trend Micro InterScan VirusWall is a high performance internet gateway virus scanning package. It is capable of scanning incoming content over HTTP, SMTP and FTP for viruses...

DoS через Content-Length в Microsoft IIS

При указании большого Content-Length в HTTP-запросе сервер немедленно резервирует оперативную память. Ппутем создания нескольких незавершенных одновременных подключений можно заблокировать всю память сервера...