Web Server HTTP GET Request Version Number Handling Remote Overflow

It was possible to kill the web server by sending an HTTP GET request with a long major version number. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. References: Date: Fri, 26 Ju...

BadBlue Malformed GET Request Remote DoS

By sending an invalid GET request without any URI, it iss possible to crash the remote web server. An attacker could exploit this vulnerability to make the web server crash continually. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson...

Phenoelit Advisory 0815 ++ // Xedia

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentXedia.txt Affected Products Lucent Access Point IP Services Router Formerly known as Xedia Router Luce...

CVE-2002-0781

RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND...

CVE-2002-0447

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in an HTTP GET request...

CVE-2002-0595

Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...

CVE-2002-0447

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in an HTTP GET request...

CVE-2002-0415

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...

CVE-2002-0595

Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...

CVE-2002-0541

Buffer overflow in Tivoli Storage Manager TSM 1 Server or Storage Agents 3.1 through 5.1, and 2 the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581...

CVE-2002-0298

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...

CVE-2002-0335

The CVE-2002-0335 entry describes a vulnerability in Galacticomm Worldgroup Web Server ≤ 3.20 where a long HTTP GET request can trigger a buffer overflow. This can allow remote attackers to cause a denial of service and potentially execute arbitrary code. The primary affected component is the Wor...

CVE-2002-0335

Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request...

CVE-2001-1287

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

LabVIEW Web Server DoS

GET request with n instead of rn causes server to crash...

CVE-2002-0177

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client...

CVE-2002-0177

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client...

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow source: https://www.securityfocus.com/bid/4531/info WebTrends Reporting Center is used to organize and present usage information for multiple server web environments. Reporting Center is available for Windows NT and 2000, Linux an...

Remote root buffer overflow in Icecast server

Stack overflow on long GET request...

CVE-1999-1035

The provided records identify CVE-1999-1035 as a vulnerability in Microsoft IIS 3.0 and 4.0 running on x86 and Alpha, where remote attackers can cause a denial of service (hang) by sending a malformed GET request. Root cause details are not elaborated beyond mentioning a malformed GET handling is...