CVE-2007-0019: Undefined Security Weakness

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2000-1242

The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...

CVE-2000-1242

CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...

Design/Logic Flaw

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files...

CVE-2006-2309: Undefined Security Weakness

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files...

CVE-2006-2309

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files...

CVE-2006-2309

The CVE-2006-2309 issue affects EServ/3.25 HTTP server where crafted requests containing dot, space, and slash characters can disclose the source code of script files. Secunia reports directory traversal and filename-extension validation flaws enabling disclosure; affected software is EServ/3 ver...

Novell GroupWise Messenger Accept-Language buffer overflow

Added: 04/20/2006 CVE: CVE-2006-0992 BID: 17503 OSVDB: 24617 Background Novell GroupWise includes the Messaging Agent which offers an HTTP service on port 8300/TCP. Problem A buffer overflow in the Messaging Agent allows remote attackers to execute commands by sending a long, specially crafted...

Novell GroupWise Messenger Accept-Language buffer overflow

Added: 04/20/2006 CVE: CVE-2006-0992 BID: 17503 OSVDB: 24617 Background Novell GroupWise includes the Messaging Agent which offers an HTTP service on port 8300/TCP. Problem A buffer overflow in the Messaging Agent allows remote attackers to execute commands by sending a long, specially crafted...

Novell GroupWise Messenger Accept-Language buffer overflow

Added: 04/20/2006 CVE: CVE-2006-0992 BID: 17503 OSVDB: 24617 Background Novell GroupWise includes the Messaging Agent which offers an HTTP service on port 8300/TCP. Problem A buffer overflow in the Messaging Agent allows remote attackers to execute commands by sending a long, specially crafted...

CVE-2006-0784

D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service CAMEO HTTP service crash via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments...

CVE-2006-0784

D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service CAMEO HTTP service crash via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments...

CVE-2006-0784: Undefined Security Weakness

D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service CAMEO HTTP service crash via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments...

Novell Open Enterprise Server Remote Manager (novell-nrm) POST Request Content-Length Overflow

The remote host is running Novell Remote Manager HTTP service for SuSE Enterprise or Open Enterprise Server. The remote version of this software is vulnerable to a heap overflow attack that may be exploited by sending a negative value for the 'Content-Length' field. Since the 'httpstkd' service...

CVE-2004-2549: Undefined Security Weakness

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

Enterasys Dragon Enterprise Reporting Detection (HTTP)

HTTP based detection of Enterasys Dragon Enterprise Reporting. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass

Oracle Application Server 9.0 - HTTP Service ModAccess Restriction Bypass source: https://www.securityfocus.com/bid/13418/info Oracle HTTP ServerOHS of Oracle Application Server is prone to an access restriction bypass vulnerability. It is possible to configure a list of forbidden URIs in OHS. Th...

MailEnable HTTPMail Service Authorization Header Remote Overflow

The version of MailEnable running on the remote host has a buffer overflow vulnerability when processing the Authorization field in the HTTP header. A remote attacker could exploit this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

Novell Netware 6.0 / eDirectory 8.7 - HTTPSTK.NLM Remote Abend

source: https://www.securityfocus.com/bid/7841/info It has been reported that the HTTP Stack distributed with Novell Netware and eDirectory does not properly handle some types of malformed packets. Because of this, an attacker may be able to cause a denial of service to legitimate users of the HT...