CVE-2003-1137

CVE-2003-1137 affects sh-httpd versions 0.3 and 0.4. The issue allows remote attackers to read files or execute arbitrary CGI scripts via a GET request containing an asterisk (*) wildcard character, indicating improper handling of wildcards in input. The provided documents do not specify a fix or...

CVE-2004-1991

Directory traversal vulnerability in Aldo's Web Server aweb 1.5 allows remote attackers to view arbitrary files via a .. dot dot in an HTTP GET request...

CVE-2004-2033

Orenosv 0.5.9f allows remote attackers to cause a denial of service crash via a long HTTP GET request...

CVE-2004-1784

Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-1991

CVE-2004-1991 affects Aldo’s Web Server (aweb) 1.5. The vulnerability is aDirectory traversal in an HTTP GET request that allows an attacker to view arbitrary files by supplying an improper path using .. (dot dot). The NVD metrics indicate a NETWORK attack vector with low complexity and no authen...

CVE-2004-1973

The vulnerability CVE-2004-1973 concerns the DiGi Web Server, where a remote attacker can trigger a denial of service by sending an HTTP GET containing a large sequence of / characters. The server’s processing converts slashes to backslashes, consuming resources and potentially impacting availabi...

CVE-2003-1192

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2003-1137

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...

CVE-2004-1973

DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2004-2016

Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request...

CVE-2003-1138

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...

Ashleys Web Server - Denial of Service

Ashleys Web Server - Denial of Service include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73"...

Ashley's Web Server - Denial of Service

include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73" "\x74\x76\x61\x72\x69\x61\x62\x6c\x65\x3d\x67\x69\x66\x20\x48\x54"...

CVE-2005-1243

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

CVE-2005-1173

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...

CVE-2005-1230

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in a GET request...

CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

CVE-2005-0684

CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...

CVE-2005-1240

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...