Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass

Oracle Application Server 9.0 - HTTP Service ModAccess Restriction Bypass source: https://www.securityfocus.com/bid/13418/info Oracle HTTP ServerOHS of Oracle Application Server is prone to an access restriction bypass vulnerability. It is possible to configure a list of forbidden URIs in OHS. Th...

MailEnable HTTPMail Service Authorization Header Remote Overflow

The version of MailEnable running on the remote host has a buffer overflow vulnerability when processing the Authorization field in the HTTP header. A remote attacker could exploit this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

Novell Netware 6.0 / eDirectory 8.7 - HTTPSTK.NLM Remote Abend

source: https://www.securityfocus.com/bid/7841/info It has been reported that the HTTP Stack distributed with Novell Netware and eDirectory does not properly handle some types of malformed packets. Because of this, an attacker may be able to cause a denial of service to legitimate users of the HT...

BitMover BitKeeper 3.0 - Daemon Mode Remote Command Execution

source: https://www.securityfocus.com/bid/6588/info It has been reported that BitKeeper is vulnerable to an input validation bug. When the software is run in daemon mode, it starts a service with an interface that can be connected to via HTTP. By sending specially crafted input to the service, it...

Microsoft Internet Information Server (IIS) vulnerable to DoS via malformed FTP connection status request

Overview A vulnerability in IIS could allow an intruder to disrupt ordinary operations of both FTP and Web services on vulnerable IIS servers. Description IIS includes an FTP server. An intruder who sends a malformed request for the status of an existing connection could cause the IIS server to...

CVE-2001-1064

Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the 1 HTTP or 2 telnet service, which causes the router to become unresponsive and stop forwarding packets...

CVE-2000-1242

The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...

CVE-2000-0380

Cisco IOS HTTP server on affected Cisco routers/switches (IOS 11.1–12.1) is vulnerable to a denial-of-service via a GET request to a URL containing the characters %% in the HTTP path. The underlying issue, as documented by Cisco and multiple security resources, is a defect that can cause the devi...

CVE-2000-0380

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string...

DoS-CProxyv3.3

Last day I found a vulnerability in CProxy while I was testing it to install in a host server in one office... Here is the test that demonstrate the existence of the bug / Remote Denial of Service for CProxy v3.3 - Service Pack 2 C |TDP| - HaCk-13 TeaM - 2000 This program xploits an overflow...

Computalynx CProxy Server 3.3 SP2 - Buffer Overflow (Denial of Service) (PoC)

// source: https://www.securityfocus.com/bid/1213/info A buffer overflow DoS vulnerability exists in CProxy Server 3.3 Service Pack 2 / Remote Denial of Service for CProxy v3.3 - Service Pack 2 C |TDP| - HaCk-13 TeaM - 2000 This program xploits an overflow vulnerability in CProxy 3.3 SP2 HTTP...