1752 matches found
CVE-2002-0748
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service crash via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations...
CVE-2002-0482
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. dot dot in the HTTP GET request...
CVE-2002-0415
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...
Web Server HTTP GET Request Version Number Handling Remote Overflow
It was possible to kill the web server by sending an HTTP GET request with a long major version number. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. References: Date: Fri, 26 Ju...
Phenoelit Advisory 0815 ++ // Xedia
Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentXedia.txt Affected Products Lucent Access Point IP Services Router Formerly known as Xedia Router Luce...
CVE-2002-0447
Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in an HTTP GET request...
CVE-2002-0335
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request...
CVE-2002-0595
Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...
CVE-2002-0447
Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in an HTTP GET request...
CVE-2002-0415
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...
CVE-2002-0447
CVE-2002-0447 concerns the Xerver Free Web Server (versions 2.10 and earlier). The vulnerability is a directory traversal in which an attacker can use .. in an HTTP GET request to list arbitrary directories. The CVE entry explicitly states this allows remote access to directory listings, indicati...
CVE-2002-0415
The CVE-2002-0415 entry describes a directory traversal vulnerability in the web server used by RealPlayer 6.0.7 (and possibly other versions). The vulnerability allows local users to read files accessible to RealPlayer by using a .. (dot dot) sequence in an HTTP GET request to port 1275. The pro...
CVE-2002-0541
Buffer overflow in Tivoli Storage Manager TSM 1 Server or Storage Agents 3.1 through 5.1, and 2 the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581...
CVE-2002-0595
Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...
CVE-2002-0595
The CVE-2002-0595 entry describes a buffer overflow in WebTrends Reporting Center 4.0d, specifically in WTRS_UI.EXE (WTX_REMOTE.DLL). The vulnerability can be triggered by a long HTTP GET request to the /reports/ directory, allowing remote execution of arbitrary code. Metrics indicate a Network-v...
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...
CVE-2002-0335
The CVE-2002-0335 entry describes a vulnerability in Galacticomm Worldgroup Web Server ≤ 3.20 where a long HTTP GET request can trigger a buffer overflow. This can allow remote attackers to cause a denial of service and potentially execute arbitrary code. The primary affected component is the Wor...
CVE-2002-0201
CVE-2002-0201 affects Cyberstop Web Server for Windows 0.1. The vulnerability is in the HTTP GET request handling and could allow a buffer overflow, enabling remote attackers to cause a denial of service and may potentially execute arbitrary code. The available sources indicate remote exploitatio...