httpdx 1.4 - h_handlepeer Buffer Overflow (Metasploit)

httpdx 1.4 - hhandlepeer Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'HTTPDX hhandlepeer Function Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary erro...

httpdx 1.4.4 Source Disclosure

httpdx = 1.4.4 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: httpdx.sourceforge.net/downloads/ - Description - httpdx Web Server = 1.4.4 is a Windows based HTTP server. This is the latest version of the application available. httpdx is vulnerable to remote arbitrary...

CVE-2009-3663

Format string vulnerability in the hreadrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the Host header...

Format string

Format string vulnerability in the hreadrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the Host header...

CVE-2009-3663

Format string vulnerability in the hreadrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the Host header...

CVE-2009-3663

CVE-2009-3663 affects httpdx Web Server 1.4; a format string vulnerability in h_readrequest() (http.c) can be triggered via the Host header, enabling remote crash or arbitrary code execution. OpenVAS entries corroborate the issue. No remediation details are provided in the supplied documents.

CVE-2009-3663: Use of Externally-Controlled Format String

Format string vulnerability in the hreadrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the Host header...

httpdx 1.4.5 - dot Character Remote File Disclosure

httpdx 1.4.5 - dot Character Remote File Disclosure source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the...

httpdx Web server buffer overflow

Buffer overflow on GET response parsing...

httpdx 1.4.5 - dot Character Remote File Disclosure

source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server...

Remote buffer overflow in httpdx

httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Other versions may also be vulnerable...

httpdx 1.4 Buffer Overflow Exploit

httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Other versions may also be vulnerable...

httpdx 1.4 - GET Buffer Overflow

httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Other versions may also be vulnerable...

HTTPDX h_handlepeer() Function Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By sending an overly long HTTP request, an attacker can overrun a buffer and execute arbitrary code. Modul...

httpdx 1.4 Get Request Buffer Overflow

Exploit for unknown platform in category remote exploits ====================================== httpdx 1.4 Get Request Buffer Overflow ====================================== Title: httpdx 1.4 Get Request Buffer Overflow CVE-ID: OSVDB-ID: Author: Pankaj Kohli Published: 2009-10-08 Verified: yes vi...

httpdx 1.4 - GET Buffer Overflow

httpdx 1.4 - GET Buffer Overflow httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Other...

httpdx 1.4 Get Request Buffer Overflow

No description provided by source. httpdx web server 1.4 is vulnerable to a remote buffer overflow using long GET requests such as http://www.example.com/aaa=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... The vulnerability lies in httpdxsrc/http.cpp in hhandlepeer : strcpyindex,client-filereq; Othe...

httpdx 1.4 Format String Denial Of Service

httpdx Web Server 1.4 'Host Header' Remote Format String Denial of Service PoC Coded by Pankaj Kohli http://www.pank4j.com httpdx web server 1.4 is vulnerable to a remote format string vulnerability through the Host header. The vulnerability lies in httpdsrc/http.cpp in hreadrequest :...

httpdx Web Server 1.4 (Host Header) Remote Format String DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================================== httpdx Web Server 1.4 Host Header Remote Format String DoS Exploit ==================================================================== httpdx Web Server 1.4 'Host Header' Remot...

httpdx Web Server 1.4 (Host Header) Remote Format String DoS Exploit

No description provided by source. httpdx Web Server 1.4 'Host Header' Remote Format String Denial of Service PoC Coded by Pankaj Kohli http://www.pank4j.com httpdx web server 1.4 is vulnerable to a remote format string vulnerability through the Host header. The vulnerability lies in...