DoS против Inframail (buffer overflow)

Переполнение буфера при длинном HTTP-GET запросе...

CVE-2001-0206

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. dot dot or ... into the requested pathname of an HTTP GET request...

CVE-2001-0228

CVE-2001-0228 describes a directory traversal vulnerability in the GoAhead Web Server up to version 2.1 and earlier. An attacker can read arbitrary files by crafting a URL containing a .. sequence in an HTTP GET request. This vulnerability is documented across multiple feeds (NVD entry) and is no...

CVE-2001-0171

Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request...

CVE-2001-0227

Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0223

The CVE-2001-0223 issue concerns the wwwwais CGI (wwwwais) on affected web servers. A buffer overflow in the CGI allows remote attackers to execute arbitrary commands by crafting a long QUERY_STRING in an HTTP GET request. The Nessus entry reiterates that the wwwwais CGI has a flaw enabling arbit...

CVE-2001-0223

Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0228

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request...

CVE-2001-0226: Undefined Security Weakness

Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. dot dot or ... attack in an HTTP GET request...

CVE-2001-0168: Undefined Security Weakness

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0171: Undefined Security Weakness

Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request...

WhitSoft SlimServe HTTPd 1.1 - GET Denial of Service

WhitSoft SlimServe HTTPd 1.1 - GET Denial of Service source: https://www.securityfocus.com/bid/2451/info SlimServe HTTPd is a free HTTP Daemon maintained by WhitSoft Development. SlimServe is designed to provide basic HTTP services on the Microsoft Windows platform. A problem in the handling of...

Orange Software Orange Web Server 2.1 - Denial of Service

source: https://www.securityfocus.com/bid/2432/info A remote user can cause a denial-of-service condition in Orange Software Orange Web Server. The attacker could submit a specially crafted GET request via a telnet connection to cause the server to crash. A restart of the server is required to ga...

Sapio WebReflex 1.55 - GET Denial of Service

source: https://www.securityfocus.com/bid/2425/info WebReflex is a software package designed to operate a HTTP server off a cdrom, providing web hosting on Microsoft Windows systems. It is written and maintained by Sapio Design Ltd. A problem with the software could allow a denial of service to...

Sapio WebReflex 1.55 - GET Denial of Service

Sapio WebReflex 1.55 - GET Denial of Service source: https://www.securityfocus.com/bid/2425/info WebReflex is a software package designed to operate a HTTP server off a cdrom, providing web hosting on Microsoft Windows systems. It is written and maintained by Sapio Design Ltd. A problem with the...

DOS Vulnerability in SlimServe HTTPd

DOS Vulnerability in SlimServe HTTPd Overview SlimServe HTTPd v1.0 is a web server available from http://www.whitsoftdev.com and http://www.download.com. A DOS vulnerability exists which allows a remote attacker to crash the server. Details If an extraoridinarily long string of 'A's is sent to th...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT&T WinVNC version use exploit/windows/vnc/winvnc/httpget msf undefinedhttpget show actions ...actions... msf undefinedhttpget set ACTION msf undefinedhttpget show options ...show and set options... msf undefinedhttpget run This module requires...

CVE-2000-0766

Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request...

CVE-2000-0766: Undefined Security Weakness

Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request...