BlueDragon 6.2.1 Multiple Remote Vulnerabilities (XSS, DoS)

The remote host is running BlueDragon Server / Server JX, Java-based servers for stand-alone deployment of CFML ColdFusion Markup Language pages. The version of BlueDragon Server / Server JX installed on the remote host fails to sanitize user-supplied input passed as part of the filename before...

Design/Logic Flaw

The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...

CVE-2006-2087

The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...

CVE-2006-2087

The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...

CVE-2006-2087

The CVE-2006-2087 entry concerns Hitachi Groupmax’s Gmax Mail client prior to 20060426. The vulnerability arises from processing an attachment with an MS-DOS device filename, which can cause a denial of service (application hang or erroneous behavior). Documented affected component: the Gmax Mail...

CVE-2005-4703

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...

CVE-2003-1287

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device...

CVE-2003-1270

AN HTTP 1.41e allows remote attackers to cause a denial of service borken pipe via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability...

CVE-2003-1267

GuildFTPd 0.999 allows remote attackers to cause a denial of service crash via a GET request for MS-DOS device names such as lpt1...

CVE-2003-1270

CVE-2003-1270 is a remote-denial-of-service vulnerability where an HTTP 1.41e server may be triggered by sending a long argument to aux.cgi, potentially causing a buffer overflow or MS-DOS device vulnerability. The connected documents confirm the issue exists and describe the impact as an unauthe...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. A cracker may use this attack to make this service crash continuously. OpenVAS Vulnerability Test $Id: jigsawmsdosdevDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jigsaw webserver MS/DOS device Do...

Apache Tomcat DOS Device Name XSS

The remote Apache Tomcat web server is vulnerable to a cross site scripting issue. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure

source: https://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to obtain potentially sensitive data that could aid in other attacks. Tomcat 4.0.3...

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure

Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure source: https://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to...

CVE-2005-2815

print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information path disclosure on error or cause a denial of service resource consumption via an MS-DOS device name in the news parameter to print.php, such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...

CVE-2005-2195

Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service application crash via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than CVE-2003-0421 and CVE-2003-0502...

CVE-2004-2224

Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...

CVE-2002-2025

Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for 1 an MS-DOS device name and 2 an MS-DOS device name with a large number of characters appended to the device name...

CVE-2002-1916

Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service crash via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries...