147 matches found
CVE-2004-2517
The OpenVAS entries confirm a concrete issue in myServer 0.7.1: a remote denial-of-service caused by sending a specially crafted HTTP POST to index.html with View=Logon, leading to the server crash or stop in responding. Affected component is the HTTP POST handling for the Logon operation; the vu...
Baby Web Server 2.6.2 - Command Validation
Baby Web Server 2.6.2 - Command Validation !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web...
CVE-2004-2517
myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...
DoS против small http
Наблюдается утечка к памяти при запросе листинга каталога с отсутствующим index.html, сервер перестает отвечать на запросы, если соединения закрывается до начала передачи данных клиенту, кроме того есть локальные атаки...
CVE-2000-0353
Pine 4.x is affected by CVE-2000-0353. A remote attacker can trigger arbitrary commands by providing an index.html that executes lynx to fetch a uudecoded file from a malicious web server, which is then executed by Pine. Impact is described as full confidentiality, integrity, and availability com...
CVE-1999-0569
CVE-1999-0569 describes a directory listing vulnerability where a WWW directory URL without an index.html enables auto-indexing, revealing a full file listing. Public sources in connected documents confirm direct exposure of directory contents (confidentiality) and potential impact on integrity a...