Lucene search
K

1138 matches found

securityvulns
securityvulns
added 2005/02/02 12:0 a.m.25 views

Squid HTTP cache proxy oversized reply headers DoS

No description provided...

0.6AI score
Exploits0References1Affected Software1
OSV
OSV
added 2004/12/31 5:0 a.m.1 views

DEBIAN-CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...

5CVSS7.7AI score0.02313EPSS
Exploits1References1
NVD
NVD
added 2004/12/31 5:0 a.m.6 views

CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...

5CVSS7.3AI score0.02313EPSS
Exploits1References6
OSV
OSV
added 2004/12/31 5:0 a.m.5 views

CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...

7.6AI score
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2004/12/01 12:0 a.m.264 views

Hydra: HTTP proxy

This plugin runs Hydra to find HTTP proxy accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

5.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.14 views

HTTP Proxy (Server-facing) Detection

Binary data 1734.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/07/06 12:0 a.m.27 views

RHEL 2.1 : gaim (RHSA-2004:045)

Updated Gaim packages that fix a pair of security vulnerabilities are now available. Gaim is an instant messenger client that can handle multiple protocols. Stefan Esser audited the Gaim source code and found a number of bugs that have security implications. Many of these bugs do not affect the...

7.5CVSS6.2AI score0.19975EPSS
Exploits0References6
securityvulns
securityvulns
added 2004/07/02 12:0 a.m.26 views

Wingate unauthorized access

wingate-internal virtual deirectory of HTTP proxy server allows to download any file located on server...

1.3AI score
Exploits0References1Affected Software1
CVE
CVE
added 2004/04/16 4:0 a.m.69 views

CVE-2003-0807

CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...

5CVSS6.7AI score0.48588EPSS
Exploits0References10Affected Software4
securityvulns
securityvulns
added 2004/03/24 12:0 a.m.30 views

TrendMicro Interscan VirusWall directory traversal

Directory traversal in HTTP proxy service...

1.5AI score
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2004/03/03 5:0 a.m.19 views

CVE-2004-0006

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 cookies in a Yahoo web connection, 2 a long name parameter in the Yahoo login web page, 3 a long value parameter in the...

7.5CVSS6.5AI score0.18044EPSS
Exploits0References1
Debian
Debian
added 2004/02/05 2:6 p.m.39 views

[SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 434-1 [email protected] http://www.debian.org/security/ Martin Schulze February 5th, 2004 http://www.debian.org/security/faq -...

6.7AI score
Exploits1
NVD
NVD
added 2003/10/06 4:0 a.m.13 views

CVE-2003-0803

Nokia Electronic Documentation NED 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user...

7.5CVSS6.6AI score0.02014EPSS
Exploits1References1
Cvelist
Cvelist
added 2003/09/18 4:0 a.m.17 views

CVE-2003-0803

Nokia Electronic Documentation NED 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user...

6.6AI score0.02014EPSS
Exploits1References1
CVE
CVE
added 2003/09/18 4:0 a.m.48 views

CVE-2003-0803

The CVE-2003-0803 entry concerns Nokia Electronic Documentation (NED) 5.0. The vulnerability allows a remote attacker to abuse NED as an open HTTP proxy by supplying a URL in the location parameter, which NED accesses and returns to the user. This describes a proxy abuse/chainable request issue a...

7.5CVSS7AI score0.02014EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2003/08/03 8:0 a.m.4 views

CURL-CVE-2003-1605 Proxy Authentication Header Information Leakage

When curl connected to a site via an HTTP proxy with the CONNECT request, the user and password used for the proxy connection was also sent off to the remote server...

7.5CVSS7.6AI score0.00379EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2003/06/11 12:0 a.m.130 views

Avirt Multiple Product HTTP Proxy Overflow (deprecated)

This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...

6.5AI score0.04362EPSS
Exploits0References2
CVE
CVE
added 2003/04/02 5:0 a.m.52 views

CVE-2002-0847

CVE-2002-0847 affects tinyproxy (versions up to 1.5.0, 1.4.3 and earlier) where improper handling of certain invalid proxy requests leads to a double-free of memory, enabling potential remote code execution. Multiple connected sources corroborate the doubly freed memory vulnerability in tinyproxy...

7.5CVSS7.6AI score0.02116EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2003/03/27 5:0 a.m.53 views

CVE-2003-0106

The CVE-2003-0106 entry concerns Symantec Enterprise Firewall (SEF) 7.0 HTTP proxy URL pattern matching that can be bypassed when requests are URL-encoded (escapes, Unicode, UTF-8). The issue allows proxy users to bypass blocked URL pattern matching, enabling access to URLs that should be blocked...

7.5CVSS6.6AI score0.00749EPSS
Exploits0References5Affected Software1
securityvulns
securityvulns
added 2003/03/26 12:0 a.m.29 views

Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue

-- Corsaire Security Advisory -- Title: Symantec Enterprise Firewall SEF HTTP URL pattern evasion issue Date: 24.02.03 Application: Symantec Enterprise Firewall SEF 7.0 Environment: Windows NT 4.0, Windows 2000, Author: Martin O'Neal [email protected] Audience: General Distribution -- Sco...

7.5CVSS5.9AI score0.00749EPSS
Exploits0
Rows per page
Query Builder