NetJetServer多个远程安全漏洞

NetJetServer是一款实用的Internet/Intranet/Personal Web服务器。 NetJetServer admlgnadmin.asp文件中的登录进程存在输入验证错误，允许攻击者以管理员权限登录到Web站点。 此外，NetJetServer没有对GLOBAL.ASA文件设置正确的权限，可能允许用户非授权访问该文件。 Renasoft NetJetServer 2.5.3.939 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.renasoft.com/default.asp...

CVE-2006-5979

The CVE-2006-5979 entry concerns Renasoft NetJetServer 2.5.3.939 (and possibly earlier) where insecure permissions on Global.asa may allow remote attackers to obtain sensitive information. The available documents state the affected software and the underlying issue but do not provide exploit step...

ServletExec 4.1 ISAPI File Reading

By invoking the JSPServlet directly it is possible to read the contents of files within the webroot that would not normally be accessible global.asa, for example. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Microsoft Internet Information Services (IIS) Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. SPDX-FileCopyrightText: 2001 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IIS Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...

Microsoft IIS global.asa Remote Information Disclosure

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...

ServletExec 4.1 ISAPI com.newatlanta.servletexec.JSP10Servlet Traversal Arbitrary File Access

By invoking the JSPServlet directly it is possible to read the contents of files within the webroot that would not normally be accessible global.asa, for example. When attempting to retrieve ASP pages it is common to see many errors due to their similarity to JSP pages in syntax, and hence only...