3375 matches found
Simple Web Counter swc ctr Parameter Remote Overflow
The CGI 'swc' Simple Web Counter is present and vulnerable to a buffer overflow when issued a too long value to the 'ctr=' argument. An attacker may use this flaw to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael...
Дырка в Simple Web Counter
Переполнение буфера в параметре "ctr="...
CVE-2000-0424
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0424
The CVE-2000-0424 entry concerns the CGI Counter 4.0.7 (by George Burgyan) and describes remote command execution via shell metacharacters. The connected documents corroborate that the vulnerability arises from improper handling of shell metacharacters in the CGI Counter 4.0.7 interface, enabling...
CVE-2000-0424: Undefined Security Weakness
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0453: Undefined Security Weakness
XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000...
access.counter-4.0.7.txt
The popular CGI web page access counter version 4.0.7 by George Burgyan allows execution of arbitrary commands due to unchecked user input. Commands are executed with the same privilege as the web server. Of course, other exploits can be used to get root access on an unpatched OS. The counter...
CVE-2000-0453
XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000...
Vulnerability in CGI counter 4.0.7 by George Burgyan
I've found no mention of this vulnerability in Bugtraq or in the CVE nor have I been able to contact the author, so I'm posting here to give everyone the opportunity to protect themselves. This vulnerability is being actively exploited and has been reported to CERT. The popular CGI web page acces...
CVE-2000-0424
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...
George Burgyan CGI Counter 4.0.2/4.0.7 - Input Validation
source: https://www.securityfocus.com/bid/1202/info Due to unchecked code that handles user input in George Burgyan's CGI Counter, remote execution of arbitrary commands at the same privilege level as the web server it is running on is possible. Examples:...
Roxen Web Server Counter Module Crafted Request Saturation DoS
Roxen Challenger WebServer is running with the counter module installed. Requesting large counter GIFs can lead to CPU exhaustion. If the server does not support threads, this will prevent the server from serving other clients. %NASLMINLEVEL 70300 Copyright 2000 by Hendrik Scholz Changes by...
FreeBSD-SA-99:02.profil
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:02 Security Advisory FreeBSD, Inc. Topic: Profiling Across Exec Calls Category: core Module: kernel Announced: 1999-09-04 Affects: FreeBSD 3.2 and earlier FreeBSD-current...
counter.exe.2.70.dos.txt
Date: Wed, 19 May 1999 02:00:11 +0100 From: Mnemonix To: [email protected] Subject: Denial of Service in Counter.exe version 2.70 A denial of service exists in counter.exe version 2.70, a fairly popular webhit counter used on the Win32 platform with web servers such as IIS and...
