CVE-2001-0202

The CVE-2001-0202 entry affects the Picserver web server, where a directory traversal (..) in an HTTP GET request allows an attacker to read arbitrary files. This root cause is described across multiple sources (e.g., NVD/NVD entry and CVE record) as a remote-access vulnerability with a notable i...

CVE-2001-0206

CVE-2001-0206 describes a directory traversal vulnerability in Soft Lite ServerWorx 3.00 . The flaw allows remote attackers to read arbitrary files by inserting a sequence like .. (dot dot) or ... into the requested pathname of an HTTP GET request. The NVD metrics indicate the impact on confident...

CVE-2001-0226

CVE-2001-0226 describes a directory traversal vulnerability in BiblioWeb web server 2.0 where an attacker can read arbitrary files by exploiting .. or ... patterns in an HTTP GET request. This is a remote, unauthenticated attack that targets the server’s file path handling and allows partial conf...

CVE-2001-0227

Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0223

The CVE-2001-0223 issue concerns the wwwwais CGI (wwwwais) on affected web servers. A buffer overflow in the CGI allows remote attackers to execute arbitrary commands by crafting a long QUERY_STRING in an HTTP GET request. The Nessus entry reiterates that the wwwwais CGI has a flaw enabling arbit...

CVE-2001-0223

Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0228

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request...

CVE-2001-0223: Undefined Security Weakness

Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...

CVE-2001-0226: Undefined Security Weakness

Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. dot dot or ... attack in an HTTP GET request...

CVE-2001-0202: Undefined Security Weakness

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2001-0227: Undefined Security Weakness

Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request...

CVE-2001-0228: Undefined Security Weakness

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request...

CVE-2001-0168: Undefined Security Weakness

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0206: Undefined Security Weakness

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. dot dot or ... into the requested pathname of an HTTP GET request...

CVE-2001-0199: Undefined Security Weakness

Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. dot dot attack in the HTTP GET request...

WhitSoft SlimServe HTTPd 1.1 - 'GET' Denial of Service

source: https://www.securityfocus.com/bid/2451/info SlimServe HTTPd is a free HTTP Daemon maintained by WhitSoft Development. SlimServe is designed to provide basic HTTP services on the Microsoft Windows platform. A problem in the handling of HTTP GET requests could allow a remote user to deny...

Sapio WebReflex 1.55 - GET Denial of Service

Sapio WebReflex 1.55 - GET Denial of Service source: https://www.securityfocus.com/bid/2425/info WebReflex is a software package designed to operate a HTTP server off a cdrom, providing web hosting on Microsoft Windows systems. It is written and maintained by Sapio Design Ltd. A problem with the...

Sapio WebReflex 1.55 - GET Denial of Service

source: https://www.securityfocus.com/bid/2425/info WebReflex is a software package designed to operate a HTTP server off a cdrom, providing web hosting on Microsoft Windows systems. It is written and maintained by Sapio Design Ltd. A problem with the software could allow a denial of service to...

CVE-2001-0133: Undefined Security Weakness

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...