CVE-2009-2582

CVE-2009-2582 describes a stack-based buffer overflow in Akamai Download Manager (DLM) manager.exe prior to 2.2.4.8, exploitable via a malformed HTTP response during a Redswoosh download that remote web servers can trigger. Connected documents align this with Akamai’s Download Manager ActiveX vec...

HTTP Server Parameter Pollution

HTTP Parameter Pollution HPP is a hacking technique. HPP attacks allow the attacker to override or add HTTP GET/POST parameters by injecting query string delimiters. This is an input validation vulnerability. Input validation flaws are caused by unsanitized data flows between the front-end and th...

Apple Safari Malformed URI Remote DoS Vulnerability (Windows)

This host is installed with Apple Safari web browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafarihttpuridosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Malformed URI Remote DoS Vulnerability Windows Authors: Chandan S Copyright:...

DDIVRT-2008-18 Orb Denial of Service

Title ----- DDIVRT-2008-18 Orb Denial of Service Severity -------- Medium Date Discovered --------------- October 21st 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and r@b13$ Vulnerability Description ------------------------- Orb Network...

Apache < 2.2.8 Multiple Vulnerabilities

Binary data 4385.prm...

Design/Logic Flaw

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.04.14 and 7.1 before 7.12.1, and the FWSM 2.x before 2.34.12 and 3.x before 3.13.24, when "inspect http" is enabled, allows remote attackers to cause a denial of service device reboot via malformed HTTP traffic...

Design/Logic Flaw

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI...

CVE-2006-2341

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI...

CVE-2006-2341

The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (pl)

No description provided by source. !/usr/bin/perl really bored kokanin / IIS 5.1 dos thing, Inge says to use a browser at http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html kokanin not like puny browser!!"1 I hoped Inge was a leet haxx0r ch1ck, but it's apparently a...

Microsoft IIS Remote DoS .DLL Url exploit

Microsoft IIS Remote DoS .DLL Url exploit Advisory Name Microsoft IIS Remote Denial of Service DoS .DLL Url exploit Release Date 16. December 2005 Vulnerable Microsoft® Internet Information Server® V5.1 Not vulnerable Microsoft® Internet Information Server® V5.0 Microsoft® Internet Information...

CVE-2005-0174

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...

Ruby cgi.rb Malformed HTTP Request CPU Utilization DoS

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU resources. Warning : Nessus solely relied on the presence of this CGI, it did not...

Caudium DoS

Malfromed HTTP request causes server to crash...

Icecast 2.0.1 (Win32) - Remote Code Execution (1)

/ by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder. -------------------------------------------------------------------------...

CVE-2004-0276

The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...

Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service

Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service source: https://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request...

Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service

source: https://www.securityfocus.com/bid/11085/info Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server. A remote attacker may cause a denial of service condition i...

DiGi WWW Server 1 - Remote Denial of Service

DiGi WWW Server 1 - Remote Denial of Service source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will...

DiGi WWW Server 1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume large amounts of CPU resources. Sinc...