Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access

source: https://www.securityfocus.com/bid/8957/info A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote' mode. When this mode is used, Web Wiz Forum will allegedly fa...

Web Wiz Forum 6.347.07.5 - Unauthorized Private Forum Access

Web Wiz Forum 6.347.07.5 - Unauthorized Private Forum Access source: https://www.securityfocus.com/bid/8957/info A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote'...

savant31.txt

Release Date: 09/22/2003 TITLE ===== Savant Web Server - Remote DoS DESCRIPTION =========== "Savant is a full-featured open source / freeware web server designed to be run under any 32-bit version of Microsoft Windows including Windows 95, 98, ME, XP, NT, and 2000. Savant was designed to be easy ...

CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure

source: https://www.securityfocus.com/bid/8515/info A vulnerability has been discovered in SAP Internet Transaction Server SITSthat could allow an attacker to obtain sensitive information. The problem occurs due to SITS disclosing sensitive local filesystem information when handling malformed...

SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure

SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure source: https://www.securityfocus.com/bid/8515/info A vulnerability has been discovered in SAP Internet Transaction Server SITSthat could allow an attacker to obtain sensitive information. The problem occurs...

CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

CVE-2003-0422

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service crash via a request to viewbroadcast.cgi that does not contain the required parameters...

Canon GP300 - Remote GET Denial of Service

Canon GP300 - Remote GET Denial of Service source: https://www.securityfocus.com/bid/8121/info A problem in the Canon GP-300 has been reported in the handling of some types of malformed web requests. This issue could result in the denial of service to legitmate users of the print server. GET /...

Compaq Web-Based Management Agent - Remote Stack Overflow Denial of Service

Compaq Web-Based Management Agent - Remote Stack Overflow Denial of Service source: https://www.securityfocus.com/bid/8014/info Compaq Web-Based Management Agent has been reported prone to a remote denial of service vulnerability. The problem occurs when making malformed requests to the service...

Compaq Web-Based Management Agent - Remote Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/8014/info Compaq Web-Based Management Agent has been reported prone to a remote denial of service vulnerability. The problem occurs when making malformed requests to the service. The resulting error reports a stack overflow, however it has not been...

Unix Version of the Pi3web DoS

http://www.rosiello.org Rosiello Security Unix Version of the Pi3web DoS. ---------------------------------------------------------- Info: Pi3Web Server is vulnerable to a denial of Service. ---------------------------------------------------------- VULNERABILITY: GET //// - 354 The bug was found...

CVE-2002-1026

Macromedia Sitespring 1.2.0 277.1 using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service crash via a long malformed request to TCP port 2500, possibly triggering a buffer overflow...

Cisco VoIP Phone Multiple Script Malformed Request DoS

The remote host appears to be a Cisco IP phone. It was possible to reboot this device by requesting : http:///StreamingStatistics?120000 This device likely has other vulnerabilities that Nessus has not checked for. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contribution...

Evolvable Shambala Server 4.5 - Web Server Denial of Service

Evolvable Shambala Server 4.5 - Web Server Denial of Service // source: https://www.securityfocus.com/bid/4897/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. It has been reported that Shambala Server's web server may be prone to a denial of...

Evolvable Shambala Server 4.5 - Web Server Denial of Service

// source: https://www.securityfocus.com/bid/4897/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. It has been reported that Shambala Server's web server may be prone to a denial of service vulnerability. The denial of service condition is a resu...

BEA Systems WebLogic Server and Express 7.0 - Null Character Denial of Service

source: https://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic data to web and wireless application...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...