2209 matches found
CVE-2005-1667
DataTrac Activity Console 1.1 is affected by CVE-2005-1667, where a remote attacker can cause a denial of service by sending a long HTTP GET request. The connected documents confirm the affected product/version and the impact (DoS), but do not provide any remediation details or exploitation speci...
CVE-2005-1667
DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request...
CVE-2005-1667
DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request...
CVE-2005-1667: Undefined Security Weakness
DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request...
CVE-2004-1973
DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...
CVE-2004-2033
Orenosv 0.5.9f allows remote attackers to cause a denial of service crash via a long HTTP GET request...
CVE-2004-1991
CVE-2004-1991 affects Aldo’s Web Server (aweb) 1.5. The vulnerability is aDirectory traversal in an HTTP GET request that allows an attacker to view arbitrary files by supplying an improper path using .. (dot dot). The NVD metrics indicate a NETWORK attack vector with low complexity and no authen...
CVE-2004-1991
Directory traversal vulnerability in Aldo's Web Server aweb 1.5 allows remote attackers to view arbitrary files via a .. dot dot in an HTTP GET request...
CVE-2004-1784
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2004-2033: Undefined Security Weakness
Orenosv 0.5.9f allows remote attackers to cause a denial of service crash via a long HTTP GET request...
CVE-2004-1973: Undefined Security Weakness
DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...
CVE-2004-2035: Undefined Security Weakness
MiniShare 1.3.2 allows remote attackers to cause a denial of service crash via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences...
CVE-2003-1159: Undefined Security Weakness
Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service server crash via an invalid URI in an HTTP GET request to TCP port 8080...
CVE-2004-1991: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Aldo's Web Server aweb 1.5 allows remote attackers to view arbitrary files via a .. dot dot in an HTTP GET request...
CVE-2004-1784: Undefined Security Weakness
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request...
Ashleys Web Server - Denial of Service
Ashleys Web Server - Denial of Service include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73"...
CVE-2005-0684
CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...
CVE-2005-0684: Undefined Security Weakness
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...
CVE-2001-1465
CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...