94 matches found
CVE-2004-2274
Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI...
Jigsaw < 2.2.4 URI Parsing Remote Code Execution
Binary data 1161.prm...
Jigsaw < 2.2.4 Unspecified URI Parsing Unspecified Vulnerability
According to its banner, the remote version of Jigsaw web server has an unspecified vulnerability related to the way it parses URIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12071; scriptversion"1.16"; scriptcveid"CVE-2004-2274"; scriptbugtraqid9711;...
CVE-2002-1053
Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...
CVE-2002-1053
The CVE-2002-1053 entry documents a cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server prior to 2.2.1. The flaw allows remote attackers to inject and have arbitrary script executed via a URL that contains a reference to a nonexistent host, with the script included in the resultin...
CVE-2002-1052
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...
CVE-2002-1053
Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...
CVE-2002-1052
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...
CVE-2002-1052
CVE-2002-1052 affects Jigsaw Web server 2.2.1 on Windows. The vulnerability arises from processing HTTP requests that reference MS-DOS device names (notably the con and aux devices), allowing an attacker to cause denial of service and, in some reports, to obtain the server’s physical path by send...
W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability (REPOST)
W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability =========================================================== Affected: Jigsaw 2.2.0 and earlier http://www.w3.org/Jigsaw/RelNotes.html2.2.0 Fixed: Jigsaw 2.2.1 http://www.w3.org/Jigsaw/RelNotes.html2.2.1 Exploit:...
KPMG-2002031: Jigsaw Webserver Path Disclosure
-------------------------------------------------------------------- Title: Jigsaw Webserver Path Disclosure BUG-ID: 2002031 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible to disclose the physical path to the webroot...
KPMG-2002034: Jigsaw Webserver DOS device DoS
-------------------------------------------------------------------- Title: Jigsaw Webserver DOS device DoS BUG-ID: 2002034 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can tie up working threads on the web server...
Multiple problems in Jigsaw
DOS-device DoS, path disclosure...
Jigsaw Webserver MS/DOS Device Request Remote DoS
The version of Jigsaw web server running on the remote host has a denial of service vulnerability. It was possible to exhaust all of the web server's available threads by requesting '/servlet/con' about thirty times. A remote attacker could exploit this to repeatedly freeze the web server. C...