52 matches found
Mbedthis AppWeb 2.2.2 URL Protocol Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. This...
Appweb HTTP Server Version
The remote host is running the Appweb HTTP Server, an open source web server. It was possible to read its version number from the banner. Note that 'Embedthis' used to be known as 'Mbedthis' and 'Appweb' used to be known as 'AppWeb'. C Tenable Network Security, Inc. include"compat.inc"; if...
Mbedthis AppWeb HTTP TRACE Method Cross-Site Scripting Vulnerability
The host is running Mbedthis AppWeb Server and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmbedthiswebapphttptracemethodxssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Mbedthis AppWeb HTTP TRACE Method Cross-Site Scripting Vulnerability Authors: Rachana Shett...
Mbedthis AppWeb HTTP TRACE Method Cross-Site Scripting Vulnerability
Mbedthis AppWeb Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mbedthis AppWeb URL协议格式串漏洞
Mbedthis AppWeb是一款WEB应用服务程序。 Mbedthis AppWeb处理格式串存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务工具，可能导致任意代码执行。 问题存在于MprLogToFile::logEvent中，这里没有实际的文件描述符定义通过编译启用日志功课能，但通过conf文件可关闭，部分错误会记录到STDERR中，由于部分原因，将调用： ======= start code ============ if logFd 0 && level = 1 // // Always output fatal and error messages //...
Mbedthis AppWeb HTTP TRACE信息泄露漏洞
Mbedthis AppWeb是一款WEB应用服务程序。 Mbedthis AppWeb处理HTTP TRACE请求存在问题，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 Mbedthis AppWeb 2.2.1 升级到Mbedthis AppWeb 2.2.2版本： http://www.mbedthis.com/...
Mbedthis AppWeb 2.2.2 - URL Protocol Format String
Mbedthis AppWeb 2.2.2 - URL Protocol Format String source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printin...
Mbedthis AppWeb 2.2.2 - URL Protocol Format String
source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. This issue affects only applications th...
Cross site scripting
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
Format string
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2007-3008
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
CVE-2007-3009
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2007-3009
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service daemon crash via format string specifiers in the HTTP scheme, as demonstrated...
CVE-2007-3008
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...
CVE-2007-3008
CVE-2007-3008 affects Mbedthis AppWeb prior to 2.2.2. The vulnerability is that HTTP TRACE is enabled, which can lead to information leakage and cross-site tracing (XST) concerns. This entry is corroborated by related advisories in the connected documents, which note the TRACE method as the root ...
CVE-2007-3009
The CVE-2007-3009 case concerns Mbedthis AppWeb 2.0.5-4, where a Format string vulnerability in MprLogToFile::logEvent can be triggered when logging is supported but disabled in configuration. The issue allows remote attackers to crash the daemon (DoS) by crafting HTTP scheme format specifiers, d...
CVE-2004-2315
The vulnerability CVE-2004-2315 affects Mbedthis AppWeb HTTP server prior to version 1.0.2, where a remote attacker can cause a denial of service (crash) by sending an empty OPTIONS request. The provided documents state the issue and affected version but do not include exploit details, root-cause...
CVE-2004-2316
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...