CVE-2011-3502

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing 1 space or 2 %2e encoded dot...

Directory traversal

Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...

Integer overflow

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service crash via a negative or large Content-Length value...

Design/Logic Flaw

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing 1 space or 2 %2e encoded dot...

CVE-2011-3500

Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...

CVE-2011-3501

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service crash via a negative or large Content-Length value...

CVE-2011-3500

CVE-2011-3500 is a directory traversal vulnerability in the Cogent DataHub web server (affecting Cogent DataHub up to 7.1.1.63 and earlier). An attacker can read arbitrary files via a ..\ in an HTTP request. Public sources concur on the issue and its impact being data leakage. As per ICS-CERT gui...

CVE-2011-3501

CVE-2011-3501 concerns Cogent DataHub, where an integer overflow in DataHub 7.1.1.63 and earlier permits a remote attacker to crash the service by sending a negative or oversized Content-Length value, producing a denial-of-service condition. Public sources and security feeds reiterate this as par...

CVE-2011-3502

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing 1 space or 2 %2e encoded dot...

CVE-2011-3502

The Cogent DataHub web server (versions up to 7.1.1.63) is affected by CVE-2011-3502, which allows remote attackers to obtain the source code of executable files via a crafted request that includes a trailing space or an encoded dot (%2e). Affected products include Cogent DataHub up to 7.1.1.63 a...

CVE-2011-3493

Multiple stack-based buffer overflows in the DHOneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 domain, 2 reportdomain, 3 registerdatahub, or 4 slave commands...

Stack overflow

Multiple stack-based buffer overflows in the DHOneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 domain, 2 reportdomain, 3 registerdatahub, or 4 slave commands...

CVE-2011-3493

Multiple stack-based buffer overflows in the DHOneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 domain, 2 reportdomain, 3 registerdatahub, or 4 slave commands...

CVE-2011-3493

Cogent DataHub contains a remote, stack Unicode buffer overflow in the DH_OneSecondTick function, affecting Cogent DataHub versions up to 7.1.1.63 (and earlier). The vulnerability can allow a remote attacker to crash the service or potentially execute arbitrary code by sending long domain, report...

PT-2011-4474

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.1.63 and earlier Description The issue is related to multiple stack-based buffer overflows in the DH OneSecondTick function. This can be exploited by remote attackers to cause a denial of service crash and possibly...

PT-2011-4482

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.1.63 and earlier Description The issue is caused by an integer overflow, allowing remote attackers to cause a denial of service, resulting in a crash. This can be achieved by sending a negative or large Content-Leng...

CVE-2011-3502: Exposure of Sensitive Information to an Unauthorized Actor

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing 1 space or 2 %2e encoded dot...

CVE-2011-3500: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...

CVE-2011-3501: Undefined Security Weakness

Integer overflow in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to cause a denial of service crash via a negative or large Content-Length value...

CVE-2011-3493: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the DHOneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 domain, 2 reportdomain, 3 registerdatahub, or 4 slave commands...