EUVD-2015-1145

Malware in sbrugna...

IniNet Solutions embeddedWebServer Plain Text Save Vulnerability

IniNet Solutions GmbH is a Swiss company whose product, eWebServer, is third-party Web-based server software. IniNet Solutions embeddedWebServer suffers from a plain text save vulnerability that can be exploited by an attacker to elevate privileges...

CVE-2015-1002

IniNet embeddedWebServer aka eWebServer before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string...

Directory traversal

Directory traversal vulnerability in IniNet embeddedWebServer aka eWebServer before 2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2015-1003: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IniNet embeddedWebServer aka eWebServer before 2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2015-1001: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in IniNet embeddedWebServer aka eWebServer before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request...

CVE-2015-1005: Exposure of Sensitive Information to an Unauthorized Actor

IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

CVE-2015-1002: Undefined Security Weakness

IniNet embeddedWebServer aka eWebServer before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string...