94 matches found
CVE-2001-0778: Undefined Security Weakness
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space %20...
CVE-2001-0613
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request...
OmniHTTPd Encoded Space Request Script Source Disclosure
OmniHTTPd is affected by a vulnerability that permits malicious users to get the full source code of scripting files. By appending an ASCII/Unicode space char '%20' to a script's suffix, the web server will no longer interpret it and instead send it back as a simple document in the same manner as...
Omnicron OmniHTTPd 2.0.7 - File Corruption Command Execution
Omnicron OmniHTTPd 2.0.7 - File Corruption Command Execution source: https://www.securityfocus.com/bid/2211/info OmniHTTPD is a compact Windows based web server by Omnicron Technologies. OmniHTTPD has various features including multiple domain support, keep-alive connections, supports virtual IP...
Omnicron OmniHTTPd 2.0.7 - File Corruption / Command Execution
source: https://www.securityfocus.com/bid/2211/info OmniHTTPD is a compact Windows based web server by Omnicron Technologies. OmniHTTPD has various features including multiple domain support, keep-alive connections, supports virtual IP and non-IP servers and standard CGI support. Due to the...
Remote vulnerabilities in OmniHTTPd
== 403 Security Lab == www.403-security.org Advisory ID: 403-05-2001 ------------------------------------------------- Advisory Name: Remote vulnerabilities in OmniHTTPd Release Date: 26.05.2001 Application: OmniHTTPd Platform: Tested on Windows2000 only Author: Astral [email protected]...
Дырки в OmniHTTPD (DoS, source disclosure)
С помощью спецлиально сконструированной URL можно получить код скриптов...
Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure
Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be...
Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure
source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be appended with the Unicode equivalent of a space...
OmniHTTPd Pro Denial of Service Vulnerability
Strumpf Noir Society Advisories ! Public release ! -- -= OmniHTTPd Pro Denial of Service Vulnerability =- Release date: Tuesday, May 15, 2001 Introduction: OmniHTTPd Pro is a powerful all-purpose industry compliant web server built specifically for the Windows 9x and NT platforms. OmniHTTPd Pro c...
CVE-2001-0114
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter...
CVE-2001-0113
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script...
CVE-2001-0114
The CVE-2001-0114 issue affects OmniHTTPd 2.07; a vulnerability in statsconfig.pl allows remote attackers to overwrite arbitrary files via the cgidir parameter. This is a file-overwrite risk that can enable partial confidentiality impact and potential further abuse, depending on the target enviro...
CVE-2001-0114
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter...
CVE-2001-0113
CVE-2001-0113 : In OmniHTTPd 2.07, statsconfig.pl can be abused by a crafted mostbrowsers parameter to execute arbitrary commands because its value is incorporated into a generated Perl script. This is the core vulnerability described in the CVE. The connected documents confirm the affected produ...
CVE-2001-0113
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script...
CVE-2001-0113: Undefined Security Weakness
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script...
CVE-2001-0114: Undefined Security Weakness
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter...
Vulnerabilities in OmniHTTPd default installation
Vulnerabilities in OmniHTTPd default installation Overview Two vulnerabilities exist within the 'statsconfig.pl' script that comes with OmniHTTPd v2.07 and is installed by default. The first allows a remote attacker to corrupt any file in the system. The second allows arbitrary code to be inserte...