49 matches found
CVE-2002-1897
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service crash via a long HTTP request, possibly triggering a buffer overflow...
CVE-2004-1556
The CVE-2004-1556 entry concerns MyWebServer 1.0.3 and describes a remote denial-of-service (application crash) caused by a large number of connections in a short time. The available sources confirm the affected product and behavior but do not provide root-cause analysis, exploit details, specifi...
CVE-2004-1557
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to 1 /admin or 2 ServerProperties.html...
CVE-2004-1556
MyWebServer 1.0.3 allows remote attackers to cause a denial of service application crash via a large number of connections within a short time...
CVE-2004-1557
CVE-2004-1557 affects MyWebServer 1.0.3. A direct HTTP request to /admin or ServerProperties.html allows an unauthenticated attacker to bypass authentication, modify configuration, and read arbitrary files. The public records indicate impact to confidentiality and integrity (read and modify) with...
CVE-2004-1557
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to 1 /admin or 2 ServerProperties.html...
CVE-2004-1556
MyWebServer 1.0.3 allows remote attackers to cause a denial of service application crash via a large number of connections within a short time...
Multiple MyWebServer bugs
DoS, administration interface protection bypass...
MyWebServer 1.0.3
Hello bugtraq, -= Unl0ck Team Security Advisory =- | | | | | | / | | / | | / / / | |/ / | |/ / | | / | | / | | | / / | Y Y |/|| // / | || /|| / / / / / / / / ... the best way of protection is attack Bug: Denial of service & non password admin panel access in all server configurations. Product:...
CVE-2002-1454
MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...
CVE-2002-1454
MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...
CVE-2002-1453
Vulnerability: CVE-2002-1453 affects MyWebServer 1.0.2. Issue: Cross-site scripting (XSS) where a long request allows remote attackers to inject script/HTML, which is echoed back to the user in an error message. Impact (as described): Script execution in the context of the user’s browser via the ...
CVE-2002-1453
Cross-site scripting XSS vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message...
CVE-2002-1452
Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter...
CVE-2002-1452
CVE-2002-1452: Buffer overflow in the search capability of MyWebServer 1.0.2 can be triggered by a long searchTarget parameter, enabling remote arbitrary code execution. Registry entries show this vulnerability with network-based access, low complexity, no authentication, and partial impacts to c...
CVE-2002-1454
MyWebServer 1.0.2 is affected by a path disclosure vulnerability: when requesting a non-existent directory, the error message reveals the absolute path to the web document root, exposing sensitive directory structure. This impacts confidentiality (partial). No remediation details or patch/version...
CVE-2002-1897
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service crash via a long HTTP request, possibly triggering a buffer overflow...
CVE-2002-1003
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1003
CVE-2002-1003: A buffer overflow in MyWebServer 1.02 and earlier is triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code. This is a network-facing vulnerability with a CVSS base score of 7.5 (HIGH). OpenVAS references corroborate a 'too long URL' condition aff...