CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

CVE-2003-0764

The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...

Linux 2.4 NFSv3 knfsd Malformed GETATTR Request Remote DoS

The remote host is running knfsd, a kernel NFS daemon. There is a vulnerability in this version that may allow an attacker to cause a kernel panic on the remote host by sending a malformed GETATTR request with an invalid length field. C Tenable Network Security, Inc. include"compat.inc"; if...

3ware Disk Managment 1.10 - HTTP Request Denial of Service

3ware Disk Managment 1.10 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause t...

CVE-2002-1029

Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service crash via a malformed request to TCP port 17990...

CVE-2002-1029

Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service crash via a malformed request to TCP port 17990...

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (2)

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow 2 source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow...

Worldspan for Windows Gateway Res Manager Port 17990 Malformed Request DoS

It was possible to crash the Worldspan gateway by sending illegal data. An attacker may use this attack to make this service crash continuously. C Tenable Network Security, Inc. This script was written by Michel Arboi , starting from quake3dos.nasl and a proof of concept code by Script audit and...

BufferOverflow in OmniHTTPd 2.09

Hi there. The OmniHTTPd v2.09 of Omnicron www.omnicron.ca contains a problem with handling long HTTP versions which causes a denial of service. Found this problem while developing a new plugin for BED Bruteforce Exploit Detector,www.kryptocrew.de/snakebyte/bed.html. Problem When sending a malform...

Apache Tomcat 3.2.33.2.4 - Source.jsp Information Disclosure

Apache Tomcat 3.2.33.2.4 - Source.jsp Information Disclosure source: https://www.securityfocus.com/bid/4876/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. Under some circumstances, Tomcat may yield sensitive information about the web server...

Cisco Content Service Switch DoS

Malfromed POST request to web managment interface can cause device to reboot...

National Instruments LabVIEW 5.1.16.06.1 - HTTP Request Denial of Service

National Instruments LabVIEW 5.1.16.06.1 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a...

National Instruments LabVIEW 5.1.1/6.0/6.1 - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/4577/info A vulnerability has been reported in some versions of National Instruments LabVIEW for Linux and Microsoft Windows. LabVIEW includes an integrated HTTP server. If a malformed HTTP request is received, it is possible to crash the LabVIEW Web Serv...

CVE-2001-0760

Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field...

CVE-1999-1045

pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request...

CVE-2002-0053

Technical details about CVE-2002-0053 are not publicly available in the provided connected documents. Monitor for updates.

Microsoft IIS 5.0 - False Content-Length Field Denial of Service

Microsoft IIS 5.0 - False Content-Length Field Denial of Service source: https://www.securityfocus.com/bid/3667/info Microsoft IIS 5.0 may be prone to a denial of service condition when sent a specially crafted malformed HTTP GET header. If an IIS 5.0 web server is sent a crafted HTTP GET request...

CVE-2001-0336

The CVE-2001-0336 entry concerns Microsoft IIS 5.0 and earlier. According to provided records, the MS00-060 patch for IIS 5.0/earlier introduces an error that allows an attacker to cause a denial of service via a malformed request. The connected sources confirm the affected product version and th...

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (8)

source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...