2732 matches found
CVE-2001-1139
The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...
CVE-2001-0613
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request...
CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
CVE-2001-0613
The CVE-2001-0613 entry applies to Omnicron Technologies’ OmniHTTPd Pro HTTP Server, affected in version 2.08 and earlier. The connected OpenVAS/NASL and Nessus entries describe a vulnerability where the remote server is vulnerable to a buffer overflow when handling specially long POST requests, ...
CVE-2001-0626
CVE-2001-0626 affects O'Reilly Website Professional
CVE-2002-0055
SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...
IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
Overview Web Servers that use the IBM VisualAge Professional Vesion 3.5 Java Servlet Container are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on...
[SNS Advisory No.39] WinWrapper Professional 2.0 Remote Arbitrary File Disclosure Vulnerability
---------------------------------------------------------------------- SNS Advisory No.39 WinWrapper Professional 2.0 Remote Arbitrary File Disclosure Vulnerability Problem first discovered: Mon, 16 Jul 2001 Published: Mon, 20 Aug 2001...
CVE-2000-0622
CVE-2000-0622 : Buffer overflow in the Webfind CGI script of O'Reilly WebSite Professional WebServer 2.x (webfind.exe) when processing a too-long keywords parameter. This allows remote attackers to execute arbitrary commands on the affected host; some references describe the impact as potentially...
CVE-2000-0622
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...
CVE-2000-0577
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...
Updated Information: Internet Printing ISAPI Buffer Overrun
-----BEGIN PGP SIGNED MESSAGE----- Hi All - Russ forwarded several queries to us regarding Microsoft Security Bulletin MS01-023 http://www.microsoft.com/technet/security/bulletin/MS01-023.asp. We've updated the bulletin, but I thought it might be helpful to pass the answers back to the broader...
WFTPD "Pro" 3.0 R4 Buffer Overflow
WFTP is the Win/NT FTP server by Alun Jones, "an author acknowledged as an expert in FTP and TCP/IP". This advisory pertains to "Professional" version 3.00 R4, which appears to be the current version. It can be downloaded from the author's site at http://www.wftpd.com/. WFTPD is released as...
ActiveSync can access a locked workstation w/o unlocking
Microsoft was notified on 3/28/2001, you may use my name when publishing this. I cannot register on your site, so I am trying the general e-mail addresses. Platforms tested: =================================================== Microsoft Windows 2000 Professional build 2195 w/ SP1 Microsoft...
Vulnerable: Conference Room Professional-Developer Edititon.
Vulnerable: Conference Room Professional-Developer Edititon. www.webmaster.com Only tested on Windows NT 4.0 sp6a and Windows 2000 pro. Conference Room 1.8.1x or older versions are subject to a DoS attack when following commands are used. Make to connections to the irc server second being the clo...
CVE-2000-1111
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...
CVE-2000-0623
CVE-2000-0623 affects WebSitePro (WebSitePro/WebSite Professional) 2.4 and earlier. A remote attacker can cause a buffer overflow via a long HTTP GET request or Referrer header, potentially allowing arbitrary code execution. Public sources in connected documents identify this as a remote overflow...
WebSite Pro webfind.exe keywords Parameter Remote Overflow
The 'webfind.exe' CGI script on the remote host is vulnerable to a buffer overflow when given a too long 'keywords' argument. This problem allows an attacker to execute arbitrary code as root on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
[COVERT-2000-08] O'Reilly WebSite Professional Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 19, 2000 O'Reilly WebSite Professional Overflow COVERT-2000-08 o Synopsis The indexing utility webfind.exe distributed with O'Reilly WebSite Professional contains an unchecked buffer allowing...