Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/7287/info A denial of service vulnerability has been reported for Abyss Web Server. The vulnerability exists when Abyss attempts to parse certain incomplete HTTP headers. GET / HTTP/1.0 Connection: GET / HTTP/1.0 Range:...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2002-0794: Undefined Security Weakness

The acceptfilter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service network service availability via a large number of connection attempts, which fills the queue...

CVE-2003-0158

CVE-2003-0158 is rejected/not used; refer to CVE-2003-0139 for the active entry.

CVE-2002-1276

An incomplete fix for a cross-site scripting XSS vulnerability in SquirrelMail 1.2.8 calls the striptags function on the PHPSELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks...

CVE-2002-1276

CVE-2002-1276 concerns SquirrelMail XSS due to an incomplete fix in version 1.2.8 where strip_tags is applied to PHP_SELF but not saved back, leaving room for injection. OpenVAS notes the read_body.php path (SquirrelMail 1.2.9/1.2.10) as vulnerable to multiple parameter XSS. Debian security advis...

CVE-2002-1295

The CVE-2002-1295 entry concerns the Microsoft Java VM used by Internet Explorer. The vulnerability arises when HTML applet tags bypass Java class restriction checks by supplying the class name in the code parameter, allowing remote attackers to cause a crash (denial of service) and potentially p...

CVE-2002-1295: Undefined Security Weakness

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service crash and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions such as private constructors by providing the class name in th...

Buffalo access point DoS

Incomplete HTTP GET request causes device to reboot...

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

CVE-2002-0460

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service resource exhaustion via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd...

CVE-2002-0794

The acceptfilter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service network service availability via a large number of connection attempts, which fills the queue...

Wolfram Research webMathematica 4.0 - File Disclosure

source: https://www.securityfocus.com/bid/5035/info Wolfram Research's webMathematica is a Java based product which allows the inclusion of Mathematica content in a web environment. It includes CGI programs which generate image content based on user supplied input. A file disclosure vulnerability...

CVE-2002-0460

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service resource exhaustion via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd...

CVE-2002-0460: Undefined Security Weakness

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service resource exhaustion via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd...

EUVD-2000-1096

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2001-0716

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

CVE-2000-1111: Undefined Security Weakness

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2001-0716: Undefined Security Weakness

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

CVE-2001-0716

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...