76 matches found
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ 3Com TFTP Service = 2.0.1 Long Transporting Mode Overflow PoC ================================================================ !/usr/bin/python Buffer Overflow Long transporting mod...
AT-TFTP / 3CTftpSvc TFTP servers buffer overflow
Buffer overflows in GET and PUT commands...
WinAgents FTFP Server directory traversal
Directory traversal on GET command processing...
tftpd32 TFTP server format string vulnerability
SEND and GET TFTP commands format string bug...
Check for Apache Multiple / vulnerability
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...
CVE-2004-2516
Summary: CVE-2004-2516 corresponds to a directory traversal vulnerability in the web server implementation of myServer. Documents indicate that myServer versions
CVE-2004-2081
S CVE-2004-2081 affects Sami FTP Server 1.1.3. Local users can trigger a denial of service (pmsystem.exe crash) by issuing FTP commands: (1) CD with a tilde (~) or /../, or (2) GET for an unavailable file. This is the vulnerability described in the CVE entry; exploitation details are not provided...
CVE-2004-2081
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service pmsystem.exe crash by issuing 1 a CD command with a tilde character or dot dot /../ or 2 a GET command for an unavailable file...
CVE-2005-1484
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a ".." backward slash dot dot with a leading '"' double quote in the GET command...
CVE-2002-0877
CVE-2002-0877 describes a directory traversal vulnerability in the FTP server for Shambala 4.5. The flaw allows remote attackers to read arbitrary files by injecting .. (dot dot) into the LIST (ls) or GET commands. Public details in the provided sources confirm the vulnerability class (directory ...
CVE-2001-0783
CVE-2001-0783 : Cisco TFTP server 1.1 is vulnerable to a remote directory-traversal via the GET command (.. attack) that can read arbitrary files. Official CVSS v2.0 metrics indicate a base score of 5.0 (Network, Low attack complexity, no authentication) with partial confidentiality impact and no...
CVE-2001-0480
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...
CVE-2001-0293
CVE-2001-0293 concerns the FtpXQ FTP server (version 2.0.93) and describes a directory traversal vulnerability where an attacker can read arbitrary files via a .. in the GET command. The connected documents confirm the affected product and the root cause (path traversal via GET), but do not provi...
DOSSING IIS 4 or IIS5 fully patched using GET /%0%0 HTTP/1.0
NtWaK0, SecurHack. Labs Security Advisory 1-13-2001 DOSSING IIS 4 or IIS5 fully patched using GET /00 HTTP/1.0 oooooooooooooooooo Vulnerable Systems oooooooooooooooooo IIS 4 and IIS 5 even if fully patched. oooooooo Synopsis oooooooo While playing with miner in retina I sent this GET /00 HTTP/1.0...
CVE-2000-0175
The CVE-2000-0175 entry describes a buffer overflow in the StarOffice StarScheduler web server that allows a remote attacker to gain root access by sending a crafted, long GET request. Affected component is the web server component of StarOffice's StarScheduler; the vulnerability is triggered by ...
CVE-1999-0239
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET...