40 matches found
CVE-1999-0386
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL...
EUVD-2005-1664
Malware in sbrugna...
Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/149/info Microsoft IIS and other NT webservers contain a vulnerability that allows remote users to obtain the source code for an ASP file. When one appends ::$DATA to an asp being requested, the ASP source will be returne...
ms frontpage personal webserver 1.0/personal web server 4.0 - Directory Traversal
No description provided by source. source: http://www.securityfocus.com/bid/989/info Microsoft's Personal Web Server and Front Page Personal Web Server will follow '/..../' strings in requested URLs, allowing remote users to obtain unauthenticated read access to files and directories on the same...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
YourPersonalWebServer
YOPS Your Own Personal WEB Server is a small SEDA-like HTTP ToDo: Add Reverse ToDo: Test Vulnerable Targets Exploit Pack - Hawk Eye Edition 3.3 Copyright 2014 Juan Sacco http://exploitpack.com This program is free software: you can redistribute it and/or modify it under the terms of the GNU Gener...
CVE-2005-1662
Directory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2005-1662
Directory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2005-1663
Technical details for CVE-2005-1663 are not publicly available in the provided documents; no affected version, root cause, or remediation information is shown. Monitor for updates.
CVE-2005-1662
CVE-2005-1662 is a directory traversal vulnerability in Jeuce Personal Web Server 2.13 that allows remote attackers to read arbitrary files via a .. in the URL. The connected documents confirm the affected product/version and the traversal vector; no exploitation specifics or remediation steps ar...
CVE-2005-1663
Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service server crash via a GET request beginning with "://"...
CVE-2005-1663
Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service server crash via a GET request beginning with "://"...
Jeuce Personal Web Server multiple bugs
Directory traversal, DoS...
[SA13732] Jeuce Personal Web Server Two Vulnerabilities
TITLE: Jeuce Personal Web Server Two Vulnerabilities SECUNIA ADVISORY ID: SA13732 VERIFY ADVISORY: http://secunia.com/advisories/13732/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote SOFTWARE: Jeuce Personal Web Server 2.x...
[NT] BearShare Directory Traversal Issue Resurfaces
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (2)
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 2 // source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request...
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (3)
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 3 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...
Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (4)
// source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...