httpdx 1.5.2 Pre-Auth Denial Of Service

Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferret Hat's off to dookie2000ca Date: 06/02/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod to the Exploit-DB Team EAX 00000000 ECX 00000005 EDX 003E39AC EBX 003EC96...

httpdx 1.5.2 - Remote Denial of Service (PoC)

httpdx 1.5.2 - Remote Denial of Service PoC Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferret Hat's off to dookie2000ca Discovered on: 06/02/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod to the Exploit-DB Te...

httpdx v1.5.2 Remote Pre-Authentication DoS (PoC crash)

Exploit for unknown platform in category dos / poc ======================================================= httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash ======================================================= Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferre...

httpdx 1.5.2 - Remote Denial of Service (PoC)

Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferret Hat's off to dookie2000ca Discovered on: 06/02/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod to the Exploit-DB Team !/usr/bin/python import socket buffer =...

httpdx webserver v1.5 Remote Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

httpdx Web server information disclosure

It's possible to obtain script source by adding space symbol...

httpdx 1.5 'Space Character' Remote File Disclosure Vulnerability

httpdx is prone to a remote file disclosure vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

httpdx Space Character Remote File Disclosure Vulnerability

httpdx is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks. httpdx 1.5 is affected; other...

Httpdx 1.5 Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php%20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

Design/Logic Flaw

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4531

CVE-2009-4531 affects httpdx 1.4.4 and earlier, enabling remote disclosure of web-page source code by appending a dot to the URI. The vulnerability is described consistently across sources as a server-side flaw in handling specific request syntax, allowing partial disclosure of scripts or page co...

PT-2009-6629 · Httpdx · Httpdx

Name of the Vulnerable Software and Affected Versions: httpdx versions 1.4.4 and earlier Description: The issue allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI. Recommendations: For httpdx versions 1.4.4 and earlier, consider restricting...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX HTTP server. By sending a specially crafted HTTP request containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via FTP. This...

HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX FTP server. By sending a specially crafted FTP command containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via FTP. This modul...

HTTPDX h_handlepeer() Function Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By sending an overly long HTTP request, an attacker can overrun a buffer and execute arbitrary code. This...

httpdx Web Server 'h_handlepeer()' Buffer Overflow Vulnerability

httpdx Web Server is prone to a Buffer Overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...