4356 matches found
TinyWeb cgi-bin Crafted HTTP GET Request DoS
According to its banner, the remote version of TinyWeb has a denial of service vulnerability. Issuing a specially crafted GET request similar to : GET /cgi-bin/.%00./dddd.html can cause the server to consume large amounts of CPU time. Changes by Tenable: - Revised plugin title, output formatting,...
CVE-2003-0842
Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...
CVE-2003-0843: Undefined Security Weakness
Format string vulnerability in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding...
CVE-2003-0842: Undefined Security Weakness
Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...
Savant Web Server 3.1 - Page Redirect Denial of Service
Savant Web Server 3.1 - Page Redirect Denial of Service source: https://www.securityfocus.com/bid/8712/info Savant Web Server is prone to a denial of service vulnerability. The server reportedly goes into an infinite loop upon receipt of a specially crafted HTTP GET request that causes the server...
Savant Web Server 3.1 - Page Redirect Denial of Service
source: https://www.securityfocus.com/bid/8712/info Savant Web Server is prone to a denial of service vulnerability. The server reportedly goes into an infinite loop upon receipt of a specially crafted HTTP GET request that causes the server to repeatedly redirect to the default page...
MyServer 0.5 - GET Argument Buffer Overflow
MyServer 0.5 - GET Argument Buffer Overflow // source: https://www.securityfocus.com/bid/7770/info myServer has been reported prone to a remote buffer overflow vulnerability. The vulnerability exists when the web server attempts to process HTTP GET requests of excessive length. Although...
SurgeLDAP 1.0 d - Full Path Disclosure
SurgeLDAP 1.0 d - Full Path Disclosure source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server...
Cisco IOS HTTP buffer overflow
Buffer overflow on GET request over 2 GB...
CVE-2003-0651
CVE-2003-0651 affects the Apache module mod_mylo, specifically the mylo_log logging function in versions
CVE-2003-0651: Undefined Security Weakness
Buffer overflow in the mylolog logging function for modmylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2003-0647: Undefined Security Weakness
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long 2GB HTTP GET request...
Multiple Cisco AP bugs
Oversized HTTP GET request DoS. Valid account disclosure...
CVE-2003-0389
Cross-site scripting XSS vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script...
Twilight Webserver 1.3.3.0 (GET) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================= Twilight Webserver 1.3.3.0 GET Remote Denial of Service Exploit ================================================================= Denial of Service Attack against Twilight Webserve...
MyServer 0.4.1 - Remote Denial of Service
source: https://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via malicious HTTP GET requests. It has be...
CVE-2003-0389: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script...
Pi3Web Malformed GET Request Remote Overflow
The remote Pi3Web web server may crash when it is sent a malformed request, like : GET //?SortName=A This issue may allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11695;...
CVE-2003-0276: Undefined Security Weakness
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GET request with a large number of / characters...