CVE-2002-0298

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...

CVE-2002-0298

Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...

CVE-2002-0177

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client...

CVE-2002-0177

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client...

CVE-2002-0177

Summary: CVE-2002-0177 affects Icecast 1.3.11 and earlier, allowing remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client due to a remote buffer overflow. Affected product/version: Icecast, version

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2000-0593

WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number...

CVE-2001-0252

iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...

CVE-2001-0252

CVE-2001-0252 affects iPlanet (Netscape) Enterprise Server 4.1. A remote attacker can trigger a denial of service by sending a long HTTP GET request containing many "/../" sequences, leading to server instability. The vulnerability is described across multiple sources (NVD/CVE entries and Nessus/...

CVE-2000-0593

WinProxy 2.0 and 2.0.1 are affected. A remote attacker can cause a denial of service by sending an HTTP GET request without specifying an HTTP version. This vulnerability is cataloged as CVE-2000-0593 with a NVD base score of 5.0 (Medium) and an availability impact of Partial. The available recor...

Переполнения буфера в WorldGroup (buffer overflow)

Переполнения буфера в ftp LIST и http GET...

Galacticomm Worldgroup 3.20 - Remote Web Server Denial of Service

Galacticomm Worldgroup 3.20 - Remote Web Server Denial of Service // source: https://www.securityfocus.com/bid/4186/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp...

Galacticomm Worldgroup 3.20 - Remote Web Server Denial of Service

// source: https://www.securityfocus.com/bid/4186/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been reported in the web server includ...

CVE-2001-1465

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...

Microsoft IIS 5.0 - False Content-Length Field Denial of Service

source: https://www.securityfocus.com/bid/3667/info Microsoft IIS 5.0 may be prone to a denial of service condition when sent a specially crafted malformed HTTP GET header. If an IIS 5.0 web server is sent a crafted HTTP GET request which contains a falsified and excessive "Content-Length" field,...

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0821

DCShop 1.002 beta default configuration exposes sensitive files in the cgi-bin directory (orders.txt, auth_user_file.txt), allowing remote reads via HTTP GET. Connected OpenVAS entry corroborates a vulnerable DCShop CGI release and suggests access to admin passwords, current/pending transactions,...

EUVD-2001-0805

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for 1 orders.txt or 2 authuserfile.txt...