DoS против vqServer

Переполнение буфера при длинном HTTP-GET запросе...

Translate:f summary, history and thoughts

Because Microsoft went the way of HIDING the actual mechanism of Translate:f from all of us original KB article is gone and new Security Bulletin is playing nasty game of downplaying the problem, i have decided to write follow up with sufficient information. HOW IT WORKS -------------------------...

Microsoft IIS 5.0 - Translate: f Source Disclosure (1)

Microsoft IIS 5.0 - Translate: f Source Disclosure 1 source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (2)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted into the request, the application will crash or can be forced to execute arbitra...

CVE-2000-0626

Alibaba Web Server 2.0 is affected by a buffer overflow in HTTP request handling (notably via long GET/POST requests), enabling remote attackers to cause denial of service. The NASL entry additionally indicates potential arbitrary code execution through crafted requests, suggesting a broader impa...

CVE-2000-0623

Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

Computer Software Manufaktur Alibaba 2.0 - Denial of Service // source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop...

CVE-2000-0376

CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...

CVE-2000-0398

The CVE-2000-0398 issue affects Rockliffe MailSite Management Agent, due to a buffer overflow in wconsole.dll that can be triggered by a long query_string parameter in an HTTP GET request. This allows remote attackers to potentially execute arbitrary commands. Public documents identify the vulner...

CVE-2000-0398

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querystring parameter in the HTTP GET request...

CVE-2000-0011

Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request...

gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd

Yo, Errr... Sorry about saying gnu-pop3d had the same problem as FTGate - don't know how that got in my list - I assume from posting after a rather hectic party and before that vital cup of coffee the next day. : Apologies, all. Anyway, I found a stack overflow in the Savant webserver the other d...

Ошибки в Savant и GuildFTPd

Обратный путь в директориях не позволяет получить файл, но позволяет проверить его наличие в GuildFTPd. переполнение буфера при длинном заголовке GET-запроса в Savant...

Переполнение буфера в LocalWeb

Переполнение буфера при длинном URL в GET-запросе...

CVE-2000-0571

LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request...

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concep...

Michael Lamont Savant Web Server 2.1/3.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concept code for the buffer overflow in Savant Written by Wizdumb The...

smallhttp.py

!/usr/bin/python Small HTTP Server DoS Proof of Concept Code. Vulnerability Discovered by USSR Labshttp://www.ussrback.com Simple Script by [email protected] By connecting to port 80http on a system running Small HTTP Server and issuing a GET command followed by 65000 bytes, the service...