security flaw

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...

CVE-2002-1120

CVE-2002-1120 affects Savant Web Server 3.1 and earlier. The vulnerability is a stack-based buffer overflow triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code on the affected server. Public references show exploit code and Metasploit modules targeting Savant...

CVE-2002-1120

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1120: Undefined Security Weakness

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1023

BadBlue server allows remote attackers to cause a denial of service crash via an HTTP GET request without a URI...

CVE-2002-1012

CVE-2002-1012 affects IBM Tivoli Management Framework (TMF) ManagedNode, specifically TMF 3.6.x through 3.7.1. It is a remote vulnerability: a crafted long HTTP GET request can trigger a buffer overflow in the web server, leading to denial of service or arbitrary code execution. The issue is docu...

CVE-2002-1003

Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1012

Buffer overflow in web server for Tivoli Management Framework TMF ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request...

CVE-2002-1078

Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / slash characters...

CVE-2002-1003: Undefined Security Weakness

Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1023: Undefined Security Weakness

BadBlue server allows remote attackers to cause a denial of service crash via an HTTP GET request without a URI...

CVE-2002-1061: Undefined Security Weakness

Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP GET request with a long major version number, 2 an HTTP GET request to the HTTP proxy on port 3128...

Buffer overflow in MyWebServer

Buffer overflow on oversized GET request...

Oracle Web Cache Admin Module Multiple GET Request Method DoS

It was possible to kill the web server by requesting '/.' or '/../', or sending an invalid request using chunked content encoding. An attacker may exploit this vulnerability to crash the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichae...

CVE-2002-0748

LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service crash via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations...

CVE-2002-0415

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...

CVE-2002-0482

Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. dot dot in the HTTP GET request...

602Pro Lansuite DoS

Buffer overflow in GET-request, DOS-devices access...

Web Server HTTP GET Request Version Number Handling Remote Overflow

It was possible to kill the web server by sending an HTTP GET request with a long major version number. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. References: Date: Fri, 26 Ju...

BadBlue Malformed GET Request Remote DoS

By sending an invalid GET request without any URI, it iss possible to crash the remote web server. An attacker could exploit this vulnerability to make the web server crash continually. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson...