Design/Logic Flaw

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

The CVE-2008-4165 entry concerns Kolab Groupware Server 1.0.0. The vulnerable component is admin/user/create_user.php, which places a user password in an HTTP GET request. This allows local administrators and possibly remote attackers to obtain cleartext passwords by inspecting the ssl_access_log...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

3proxy 0.5.3g logurl() Remote Buffer Overflow Exploit (win32) (pl)

No description provided by source. !/usr/bin/perl This module exploits a stack overflow in 3Proxy prior to 0.5.3h, and 0.6b-devel before 20070413. By sending a long host header in HTTP GET request to the default port of 3128, a remote attacker could overflow a buffer and execute arbitrary code...

3proxy 0.5.3g (Windows x86) - logurl() Remote Buffer Overflow (Perl)

3proxy 0.5.3g Windows x86 - logurl Remote Buffer Overflow Perl !/usr/bin/perl This module exploits a stack overflow in 3Proxy prior to 0.5.3h, and 0.6b-devel before 20070413. By sending a long host header in HTTP GET request to the default port of 3128, a remote attacker could overflow a buffer a...

CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

2007-06 Sentinel Protection Server Directory Traversal

Title ----- Sentinel Protection Server Directory Traversal Severity -------- High Date Discovered --------------- October 10th, 2007 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey Lebleu Vulnerability Description ------------------------- A classic...

CVE-2002-2406: Improper Input Validation

Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service hang via a large number of percent characters % in an HTTP GET request...

CVE-2003-1510

TinyWeb 1.9 allows remote attackers to cause a denial of service CPU consumption via a ".%00." in an HTTP GET request to the cgi-bin directory...

CVE-2002-2240

Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...

CVE-2002-2240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...

CVE-2004-2727

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

CVE-2003-1337

Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

Buffer overflow

Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 2372...

CVE-2007-1685

Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 2372...

CVE-2007-1685

CVE-2007-1685 describes a buffer overflow in k9filter.exe of BlueCoat K9 Web Protection 3.2.36 (and likely earlier versions before 3.2.44) that can be triggered by a long HTTP GET request to port 2372. The vulnerability may allow a remote attacker to cause a denial of service (crash) and potentia...

CVE-2007-1685

Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 2372...

CVE-2007-0938: Undefined Security Weakness

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...