CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compressi...

CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compressi...

CVE-2006-3869

CVE-2006-3869 affects Internet Explorer 6 SP1 on Windows 2000/XP SP1, where a heap-based buffer overflow in URLMON.DLL occurs when processing long URLs over HTTP/1.1 with compression. The flaw, tied to the MS06-042 update (pre-20060824), can lead to denial of service or remote code execution. Rem...

Microsoft Security Advisory (923762) Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit

Microsoft Security Advisory 923762 Microsoft Security Advisory 923762: Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit Published: August 22, 2006 On August 15, 2006 Microsoft announced that it would be re-releasing MS06-042...

CVE-2006-3869: Undefined Security Weakness

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compressi...

Microsoft Internet Explorer long URL buffer overflow

Overview Microsoft Internet Explorer is vulnerable to a buffer overflow when processing a long URL on a web site that uses HTTP 1.1 compression. This could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer 6 Service...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

CVE-2006-2786 is an HTTP response smuggling vulnerability affecting Mozilla Firefox and Thunderbird prior to 1.5.0.4. According to connected advisories, an attacker could craft responses that a proxy or header formatting could fool the client into treating as responses from two different sites, p...

zawhttpd0823.txt

Name: zawhttpd Version: 0.8.23 previous version probably too. Language: C Problem: Buffer Overflow Vendor: http://www.norz.org/zawhttpd.html Discovered by: Kamil 'K3' Sienicki Description: zawhttpd is a mini Web server that features HTTP/1.0 and 1.1 support, keep-alive persistent connections, IPv...

CVE-2006-1218

Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service CPU consumption and ABEND via unknown attack vectors related to "media streaming over HTTP 1.1"...

CVE-2006-1218

The vulnerability concerns Novell BorderManager (HTTP proxy) versions 3.8 and earlier. It describes an unspecified flaw in the HTTP proxy that can be exploited remotely to cause a denial of service (CPU consumption and ABEND). The attack vectors are not specified beyond a relation to media stream...

CVE-2006-1218: Undefined Security Weakness

Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service CPU consumption and ABEND via unknown attack vectors related to "media streaming over HTTP 1.1"...

CVE-2005-4836

The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...

HTTP TRACE

Transparent or reverse HTTP proxies may be implement on some sites. OpenVAS Vulnerability Test $Id: httptrace.nasl 6768 2017-07-20 08:06:19Z cfischer $ HTTP TRACE Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; you can redistribute it and/or modify it...

HTTP 1.1 header overflow

It was possible to kill the web server by sending an invalid request with a too long HTTP 1.1 header Accept-Encoding, Accept-Language, Accept-Range, Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE, Host A cracker may exploit this vulnerability to make...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...