3654 matches found
CVE-2007-6457
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...
CVE-2007-6457
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...
SurgeMail v.38k4 webmail Host header Denial of Service Exploit
No description provided by source. ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows version rgod / dl"phpcurl.so"; $url = "http://192.168.0.1"; $puf=strrepeat0xff,0xfff; $header ="POST / HTTP/1.0\r\n"; $header.="Host: $puf\r\n"; $header.="Connection...
SurgeMail v.38k4 webmail Host header Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================== SurgeMail v.38k4 webmail Host header Denial of Service Exploit ============================================================== 0day.today 2018-04-11...
SurgeMail v.38k4 webmail Host header crash
?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows version rgod / dl"phpcurl.so"; $url = "http://192.168.0.1"; $puf=strrepeat0xff,0xfff; $header ="POST / HTTP/1.0rn"; $header.="Host: $pufrn"; $header.="Connection: Closernrn"; $ch = curlinit;...
SurgeMail畸形HOST头字段数据拒绝服务漏洞
SurgeMail是一款WEB MAIL应用程序。 SurgeMail不正确处理HTTP POST请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理HTTP POST提交的HOST字段数据，可导致应用程序崩溃，造成拒绝服务攻击。 NetWin SurgeMail 38k4 目前没有解决方案提供： http://www.netwinsite.com/surgemail/ ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows...
Surgemail 38k4 - webmail Host header Denial of Service
Surgemail 38k4 - webmail Host header Denial of Service milw0rm.com 2007-12-18...
surgemail-crash.txt
original url: http://retrogod.altervista.org/rgodsurgemailcrash.html...
Surgemail 38k4 - webmail Host header Denial of Service
milw0rm.com 2007-12-18...
Tivoli Storage Manager CAD Host header buffer overflow
Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...
Tivoli Storage Manager CAD Host header buffer overflow
Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...
CVE-2006-7027
Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...
Hardcoded credentials
FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...
CVE-2007-0838
FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...
CVE-2007-0838
FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service infinite loop via a HOST: header with a hostname and port number that refers to the server itself...
Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (3)
source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...
Novell eDirectory NDS Server Host Header Overflow
This module exploits a stack buffer overflow in Novell eDirectory 8.8.1. The web interface does not validate the length of the HTTP Host header prior to using the value of that header in an HTTP redirect. This module requires Metasploit: https://metasploit.com/download Current source:...
Novell eDirectory/iMonitor HTTPSTK栈缓冲区溢出漏洞
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory在处理用户请求构造回应时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 Novell的HTTP协议栈（httpstk）没有检查客户端所提供的HTTP Host请求头（如Host: www.host.com）的值。当服务器在准备HTTP重新定向响应调用snprintf时可能会触发这个漏洞，导致以加载httpstk库进程的权限执行任意指令。C++伪代码如下： define HTTPHDRHOSTFIELD 211 char szHttp = "HTTP"; char...
MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit
No description provided by source. / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back...