4308 matches found
CVE-2001-0892
Vulnerability : Acme Thttpd Secure Webserver prior to 2.22, with the chroot option enabled, is exposed to remote access that can view sensitive files under the document root (e.g., .htpasswd) via a GET request with a trailing slash. Affected product : Acme Thttpd Secure Webserver (before 2.22). R...
CVE-2001-0893
Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0893
Acme mini_httpd before 1.16 is affected. A remote attacker can view sensitive files under the document root (e.g., .htpasswd) by issuing a GET request with a trailing /. Root cause is not more detailed in the provided documents. The impact is exposure of confidential data on the server; exploitat...
CVE-2001-1018: Undefined Security Weakness
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...
CVE-2001-0892: Exposure of Resource to Wrong Sphere
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0893: Exposure of Resource to Wrong Sphere
Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0836
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2001-0868
Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...
CVE-2001-0868
Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...
EUVD-2001-0805
The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for 1 orders.txt or 2 authuserfile.txt...
CVE-2001-0821
DCShop 1.002 beta default configuration exposes sensitive files in the cgi-bin directory (orders.txt, auth_user_file.txt), allowing remote reads via HTTP GET. Connected OpenVAS entry corroborates a vulnerable DCShop CGI release and suggests access to admin passwords, current/pending transactions,...
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-1287
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2001-0778
Affected software: OmniHTTPd (OmniPro HTTPd) up to 2.08. Vulnerability: remote attackers can disclose source code of scripting files by sending a URL with an encoded space (%20); the flaw is not present for CGI directories (cgibin/cgi-win). Impact: information disclosure of script/source files (c...
CVE-2001-0778: Undefined Security Weakness
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space %20...
Получение реального IP сервера Lotus Domino (information leakage)
С помощью запроса GET //////////// HTTP/1.0 можно получить сведения о реальном IP Сервера...
CVE-2000-0243
The CVE-2000-0243 issue affects AnalogX SimpleServer:WWW, version 1.03. A remote denial-of-service is triggered by a short GET request to a CGI-bin path, crashing the server. The vulnerability is tied to the handling of specially formatted requests (exactly 8 characters after /cgi-bin/). No speci...
CVE-2000-0243: Undefined Security Weakness
AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin...
CVE-1999-1523
CVE-1999-1523 concerns the Sambar Web Server 4.2.1. A buffer overflow in the HTTP GET handling allows a remote attacker to cause a denial of service and possibly execute arbitrary commands. The vulnerability is remote, with no authentication required, and is enabled by sending a long HTTP GET req...