3652 matches found
Apache Httpd < 1.3.22 : split-logfile can cause arbitrary log files to be written to
A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to...
SHOUTcast Server User-Agent / Host Header DoS
The remote host is running SHOUTcast Server, a streaming audio server from Nullsoft. According to its banner, the installed version of SHOUTcast server will reportedly crash when it receives several HTTP requests with overly long User-Agent and/or Host request headers. %NASLMINLEVEL 70300 C Tenab...
CVE-2001-0312
IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing...
Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (1)
/ iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back to the beginning of the buffer. an...
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (1)
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 1 / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position...
Дырка в WebSphere
Переполнение буфера при длинном заголовке Host: HTTP-запроса...
Yet Another IBM WebSphere Showcode Vulerability
Summary: When IBM WebSphere application server shares the same document root as Netscape Enterprise server it is possible for a malicious user to view to view the source of any JSP file in the document root. WebSphere's plugin for Netscape Enterprise server uses the host header sent from the clie...
WebSphere application server plugin issue & vendor fix
I've had the opportunity to work with IBM WebSphere application server for a few months now and, in the course of playing around with some buffer overrun testing, a potential issue came up. WebSphere uses the HTTP Host: header to decide which WAS Virtual Host will service a particular request...
IBM Websphere Application Server 3.0.2 Server Plugin - Denial of Service
IBM Websphere Application Server 3.0.2 Server Plugin - Denial of Service source: https://www.securityfocus.com/bid/1691/info Large amounts of data ie 1092+ characters in the Host: request header may cause the web server process to fault on signal 11 SIGSEGV or signal 10 SIGBUS. GET /servletsnoop...
Imail Web Service Remote DoS Attack v.2
Imail Web Service Remote DoS Attack v.2 Release Date: August 17, 2000 Systems Affected: Ipswitch Imail 6.00 2-1 Description: The following is a simple DoS we found while working on Retina's CHAMCommon Hacking Attack Methods HTTP auditing module which should be released within the next two weeks...
