142 matches found
SHOUTcast 1.9.4 - File Request Leaked Format String
SHOUTcast 1.9.4 - File Request Leaked Format String / Shoutcast include include include include include include include include include include include define SHELLPORT 7000 define SHELLCOMMAND "unset HISTFILE; uname -a; id;" if 1 unsigned char shellcode = / bindshell 7000 Unknown /...
SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)
No description provided by source. / Shoutcast = 1.9.4 exploit by crash-x Trys to upload the shellcode to a fixed address and execute it. This exploit was not written bei Simon 'Zodiac' Moser segfault.ch. / include stdio.h include stdlib.h include stdarg.h include string.h include sys/types.h...
CVE-2005-4703
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...
CVE-2004-2169: Undefined Security Weakness
Application Access Server A-A-S 1.0.37 and earlier allows remote authenticated users to cause a denial of service application crash via a long file request...
Active WebCam Webserver <= 5.5 Multiple Vulnerabilities (DoS, Path Disc)
The version of PY Software's Active WebCam web server running on the remote host is affected by multiple vulnerabilities: o Denial of Service Vulnerabilities. A request for a file on floppy drive may result in a dialog prompt, causing the service to cease until it is acknowledged by an...
Microsoft MSN Messenger fails to properly validate file requests
Overview Microsoft MSN Messenger fails to properly validate file requests which could allow an attacker to view the contents of files on the victim's system. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with friends using text messages,...
KDE 3.0.x - KPF Icon Option File Disclosure
source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files...
KDE 3.0.x - KPF Icon Option File Disclosure
KDE 3.0.x - KPF Icon Option File Disclosure source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possibl...
CVE-2002-0894
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...
Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln
Hello, The vendor has already sent out notices and the patches can be found on the vendors homepage listed below. - [email protected] Cgi Security Advisory 6 [email protected] Thttpd and MiniHttpd Webserver Permission Bypass Found November 2001 Public Release November 2001 Vendor Contacted...
Icecast 1.1.x1.3.x - Slash File Name Denial of Service
Icecast 1.1.x1.3.x - Slash File Name Denial of Service source: https://www.securityfocus.com/bid/2933/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input...
CVE-2001-0264
Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...
elron im Anti-Virus 3.0.3 - Directory Traversal
source: https://www.securityfocus.com/bid/2519/info Elron IM is a suite of tools providing internet filtering, virus protection, and other features. Certain non-current versions of products in the Internet Manager suite, including IM Anti-Virus, are vulnerable to directory traversal attacks. An...
CVE-2001-0031
BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist...
CVE-2000-0886: Undefined Security Weakness
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability...
Дырка в IIS (File Request Parsing)
При разборе имени запрашиваемого CGI, можно выполнить приложение .bat или .cmd за счет исопльзования специальных метасимволов...
DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure
DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure source: https://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messag...
CVE-2000-0413
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path...
Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service
Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service source: https://www.securityfocus.com/bid/1288/info RealServer 7.0 will crash if it receives a request for a specific file with an unspecified variable value. http://targetIP:port/viewsource/template.html?...
Real Networks Real Server 7.0/7.0.1/8.0 Beta - view-source Denial of Service
source: https://www.securityfocus.com/bid/1288/info RealServer 7.0 will crash if it receives a request for a specific file with an unspecified variable value. http://targetIP:port/viewsource/template.html?...