CVE-2004-0466

WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service hang via a URL containing an MS-DOS device name such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...

OpenConnect Webconnect MS-DOS device name denial-of-service

Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

CVE-2004-1514

04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.

CVE-2004-1514

04WebServer 1.42 allows remote attackers to cause a denial of service fail to restart properly via an HTTP request for an MS-DOS device name such as COM2...

CVE-2004-2224

Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...

CVE-2004-2316

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...

CVE-2004-0552

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as 1 LPT1, 2 COM1, 3 AUX, 4 CON, or 5 PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed...

Samba MS-DOS Path Request Arbitrary File Retrieval

According to its version number, the remote Samba server is affected by a flaw that allows an attacker to access arbitrary files which exist outside of the shares's defined path. An attacker needs a valid account to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2004-0552

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as 1 LPT1, 2 COM1, 3 AUX, 4 CON, or 5 PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacke...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

Apache < 2.0.44 MS-DOS Device Name DoS / Code Execution

Binary data 1497.prm...

Resin < 2.1s020604 MS-DOS Device Path Disclosure

Binary data 1517.prm...

Inktomi Search MS-DOS Device Name Request Path Disclosure

This web server is running a vulnerable version of Verity Ultraseek formerly Inktomi Search. Certain requests using MS-DOS special file names such as NUL can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be...

CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

CVE-2004-0050

The CVE-2004-0050 issue affects Verity Ultraseek (Inktomi Search) prior to 5.2.2 where an MS-DOS device name parameter in the web search option can cause disclosure of the full path to the document root. The OpenVAS entries corroborate a physical path disclosure vulnerability in Ultraseek/Verity,...

CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

CVE-2003-1443

Kaspersky Antivirus KAV 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com...