Design/Logic Flaw

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

CVE-2017-6169 affects F5 BIG-IP: vulnerable in BIG-IP with PEM provisioned and URL categorization enabled when processing malformed URLs, causing Traffic Management Microkernel (TMM) to produce a core file. Affected versions include 13.0.0, 12.0.0–12.1.3, and 11.6.0–11.6.2. The F5 advisory lists ...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Allaire JRun 3.0 Servlet DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2337/info A denial of service condition exists in the JRun web application server. Requesting multiple malformed URLs by way of the java servlet, will cause the JRun application server to stop responding...

Debian DSA-2934-1 : python-django - security update

Several vulnerabilities were discovered in Django, a high-level Python web development framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-0472 Benjamin Bach discovered that Django incorrectly handled dotted Python paths when using the revers...

Updated python-django package fix two vulnerabilities

Updated python-django and python-dgango14 packages fix security vulnerabilities: Stephen Stewart, Michael Nelson, Natalia Bidart and James Westby discovered that Django improperly removed Vary and Cache-Control headers from HTTP responses when replying to a request from an Internet Explorer or...

Ubuntu: Security Advisory (USN-2212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malformed URLs from user input incorrectly validated

The validation for redirects does not correctly validate some malformed URLs, which are accepted by some browsers. This allows a user to be redirected to an unsafe URL unexpectedly...

CVE-2012-0641

CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447...

HTTP GET Vulnerability in AP1x00

The remote device is running a version of IOS that has a flaw in handling malformed URLs. An attacker can take advantage of this vulnerability by sending malformed URLs to the device possibly causing it to reload, therefore creating a denial of service condition. C Tenable Network Security, Inc...

HTTP Referrer spoofing with malformed URLs — Mozilla

Security researcher Gregory Fleischer demonstrated a problem with the HTTP Referer: sic header sent with requests to URLs containing Basic Authentication credentials with empty usernames. In these cases a number of leading characters, based on the length of the password in the URL, are removed fr...

DEBIAN-CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

Allaire JRun directory browsing vulnerability

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. Under Windows NT/2000any service pack and IIS 4.0/5.0: - JRun 3.0 all editions - JRun 3.1 all editio...

dlinkDoS.txt

Nessus wrote a nice little plugin for it http://www.securityindex.net/dlinkrouteroverflow.nasl -- My home network uses a small 4 port broadband Dlink router 704p The firmware was updated one week ago to version 2.70 from the www.D-link.com website The following malformed URL's cause odd behavior ...

CVE-2001-0724

CVE-2001-0724 relates to Internet Explorer 5.5 (and related IE versions) where malformed URLs containing dotless IP addresses can cause the browser to treat a page as if it were in the Intranet Zone, bypassing some security restrictions (zone spoofing). The vulnerability is the use of numeric IP ...

KPMG-2002021: Resin Large Parameter Denial of Service

-------------------------------------------------------------------- Title: Resin Large Parameter Denial of Service BUG-ID: 2002021 Released: 17th Jun 2002 -------------------------------------------------------------------- Problem: ======== It is possible for a malicious user to cause a Denial ...

lotus.domino.bypass.txt

--------------------------------------------------------------------------- Web: http://qb0x.net Author: Gabriel A. Maggiotti Date: Febrary 03, 2002 E-mail: [email protected] --------------------------------------------------------------------------- General Info ------------ Problem Type :...

CVE-2000-0884

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability...