CVE-2004-1444

CVE-2004-1444 describes a directory traversal vulnerability in Roundup 0.6.4 and earlier. An attacker can view arbitrary files by injecting ".." sequences in an @@ command within an HTTP GET request. The issue affects Roundup’s web-facing handling and exposes files the Roundup process can access....

CVE-2005-0275

The CVE-2005-0275 entry concerns 3Com 3CDaemon 2.0 revision 10, where TFTP handling allows remote denial of service via a GET request containing an MS-DOS device name. The issue is triggered by a crafted TFTP GET and results in an application crash, constituting partial availability impact. The s...

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...

DEBIAN-CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...

CVE-2004-2727

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

CVE-2004-2299

Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header...

CVE-2004-2323

DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config...

CVE-2004-2614

Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

CVE-2004-2114

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL...

CVE-2004-2016

Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request...

CVE-2004-1444

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...

CVE-2004-2221

Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request...

CVE-2004-2271

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-2416

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-0292

Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

CCProxy < 6.3 Logging Function HTTP GET Request Remote Overflow

Binary data 2412.prm...

CCProxy Logging Compoent HTTP GET Request Remote Overflow

The version of CCProxy running on the remote host has a buffer overflow vulnerability. This issue is triggered by sending a long HTTP GET request. A remote attacker could exploit this issue to crash the service, or potentially execute arbitrary code. C Tenable Network Security, Inc...

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...

MailPost vulnerable to cross-site scripting in the 'append' variable passed to the file as part of an HTTP GET request

Overview A cross-site scripting vulnerability is reported to exist in MailPost version 5.1.1sv and possibly earlier versions. Description According to a report by ProCheckUp, MailPost is vulnerable to a Cross-Site Scripting attack via the 'append' variable. The 'append variable is passed as part ...