3434 matches found
MediaHouse Software Statistics Server LiveStats 5.2 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted into the request, the application will crash o...
WebTrends Reporting Center for Windows 4.0 d GET Request Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/4531/info WebTrends Reporting Center is used to organize and present usage information for multiple server web environments. Reporting Center is available for Windows NT and 2000, Linux and Solaris. An issue has been...
Loom Software SurfNow 1.x/2.x Remote HTTP GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9519/info A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable...
KarjaSoft Sami HTTP Server 1.0.4 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9679/info A vulnerability has been reported for Sami HTTP server. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable of corrupting sensitive data suc...
Apache 1.2 Web Server DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2216/info Apache Web Server 1.2 and previous versions are subject to a denial of service. By requesting a malformed GET request composed of an unusually large number of '/' characters, an attacker can cause CPU usage to...
SAP DB 7.4 WebTools Buffer Overflow
No description provided by source. $Id: sapdbwebtools.rb 9842 2010-07-16 02:33:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
TinyServer 1.1 - Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...
Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit
No description provided by source...
Serva 2.0.0 - HTTP Server GET Remote Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on: Windows XP SP3...
Microsoft IIS 5.0 IISAPI Extension Enumerate Root Web Server Directory Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/194/info A GET request that specifies a nonexistent file with an IISAPI-registered extension ie .pl, .idq will cause the IIS server to return an error message that includes the full path of the root web server directory...
Allaire JRun 3 Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes,...
Logics Software LOG-FT Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an...
Macallan Mail Solution Macallan Mail Solution 2.8.4 .6 (Build 260) - Web Interface Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9646/info A vulnerability has been reported in Macallan Mail Solution that may permit remote attackers to bypass authentication for the web interface. This may be exploited by submitting a specially crafted HTTP GET reque...
PHP Advanced Transfer Manager 1.30 Remote Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15237/info PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access. Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a...
InternetNow ProxyNow 2.6/2.75 Multiple Stack and Heap Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9500/info ProxyNow has been reported to be prone to multiple overflow vulnerabilities that may allow an attacker to execute arbitrary code in order to gain unauthorized access to a vulnerable system. The vulnerabilities...
Fortinet FortiWeb Web Application Firewall Policy Bypass
No description provided by source. BINAR10 Report on Fortinet Fortiweb Findings 02/05/2012 - Fortinet FortiWeb Web Application Firewall Policy Bypass - ============================================================ 1 Affected Product Fabricant: Fortinet Product name: FortiWeb Version: Latest update...
Sami FTP Server 1.1.3 - Library Crafted GET Request Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/9657/info Sami FTP Server has been reported prone to multiple remote denial of service vulnerabilities. It has been reported that an attacker who has sufficient credentials to access a vulnerable server, may cause the...
Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit
No description provided by source. Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez:...
Sean MacGuire Big Brother 1.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET...
Apple Mac OS X Server 10.0 Overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GE...