133 matches found
MS15-038: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)
The remote Windows host is missing a security update. It is, therefore, affected by multiple privilege escalation vulnerabilities : - A elevation of privilege vulnerability exists due to NtCreateTransactionManager type confusion that allows an authenticated attacker to bypass impersonation-level...
Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to obtain potentially sensitive data that could aid i...
Rit Research Labs The Bat! 1.53 MS DoS Device Name Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4187/info The Bat! is an e-mail client for Microsoft Windows operating systems. A problem occurs with The Bat! when it is configured to save attachments seperately from the body of a message. It is possible to include a...
Faust Informatics Freestyle Chat 4.1 SR2 MS-DOS Device Name DoS
No description provided by source. source: http://www.securityfocus.com/bid/2777/info A problem with the chat server makes it possible to deny service to legitmate users. By submitting a request to the webserver including the 'AUX' MS-DOS device name, the webserver can be made to cease functionin...
Apache Web Server 2.0.x MS-DOS Device Name Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specifically, HTTP GET requests that...
Microsoft ASP.NET MS-DOS Device Name DoS (PCI-DSS check)
The web server running on the remote host appears to be using Microsoft ASP.NET, and may be affected by a denial of service vulnerability. Requesting a URL containing an MS-DOS device name can cause the web server to become temporarily unresponsive. An attacker could repeatedly request these URLs...
Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability (Aug 2000)
Microsoft FrontPage Server Extensions is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MySQL < 4.1.13 / 5.0.8 DOS Device Name Denial of Service Vulnerabilities
The version of MySQL installed on the remote host is older than 4.1.13 or 5.0.8. On Windows, a remote attacker can crash the server via a 'use' command followed by MS-DOS device name, e.g. LPT1. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17826; scriptversion"1.6"...
Novell eDirectory MS-DOS Device Name Denial of Service (CVE-2005-1729)
Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. The product includes a web server component that is used...
CVE-2008-4500
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
Command injection
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
CVE-2007-6326
Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...
Design/Logic Flaw
Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...
CVE-2007-6326
Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...
CVE-2002-2421
acWEB 1.14 allows remote attackers to cause a denial of service crash via an HTTP request for a MS-DOS device name such as COM2...
CVE-2003-1443
Kaspersky Antivirus KAV 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com...
F-Secure Policy Manager Server fsmsh.dll module DoS
The remote host is running a version a F-Secure Policy Manager Server that is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will prevent legitimate users from accessing the service using the Manager...
F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service
F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service source: https://www.securityfocus.com/bid/24233/info F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions. Exploiting this issue allows...
Design/Logic Flaw
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...
CVE-2006-2310
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...