CVE-2002-0779

The CVE-2002-0779 entry affects the FTP proxy server component of Novell BorderManager 3.6 SP1a. It describes a remote Denial of Service: an attacker can cause network connectivity loss by connecting to port 21 and sending a large amount of random data. The provided documents confirm the vulnerab...

CVE-2002-0371

CVE-2002-0371 corresponds to a buffer overflow in the gopher client handling responses in Microsoft Internet Explorer (5.1–6.0) and related components (Proxy Server 2.0, ISA Server 2000). The CERT/CC entry (VU-440275) describes an overflow when processing gopher replies, allowing arbitrary code e...

CVE-2001-1292

CVE-2001-1292 affects Sambar Telnet Proxy/Server. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long password. This is documented across NVD/CVE records as the affected product and impact. No remediation details are provided in...

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

CVE-2001-0843

CVE-2001-0843 affects the Squid proxy server (versions 2.4 and earlier). The flaw is triggered by a mkdir-only FTP PUT request, causing the daemon to crash and thus a remote denial of service. Connected advisories (Debian DSA-077-1, Mandrake MDKSA-2001:088, OpenVAS entries) corroborate remote DoS...

Проксирование HTTP-запросов через JAVA (unauthorized access)

Через прокси сервер можно получить и отправить любые html-доументы...

Squid Proxy Server contains buffer overflow in parsing of the authentication portion of FTP URLs

Overview There is a remotely exploitable buffer overflow in the Squid proxy/cache server. Exploitation of this vulnerability could lead to an intruder gaining a shell on the target Squid server. Description Squid versions 2.3 and 2.4 are vulnerable to a buffer overflow in the code that parses FTP...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow // source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a maliciou...

DeleGate 7.7.1 - Cross-Site Scripting

DeleGate 7.7.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/3749/info DeleGate is a proxy server which runs on Linux , Unix, Microsoft Windows and OS/2 platforms. It is capable of translating a number of protocolsHTTP, FTP, NNTP, POP, Telnet, etc. between client and server...

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

Proxomitron Naoko-4 - Cross-Site Scripting

Proxomitron Naoko-4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/3087/info Proxomitron is a free web proxy server. Proxomitron is vulnerable to a cross site scripting attack. The condition is present because of the way URLS are displayed in error messages. It is possible for...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...

CVE-2001-0374

CVE-2001-0374 affects the HTTP server in Compaq Web‑Based Management Agent across multiple products (Foundation Agents, Survey, Power Manager, Availability Agents, Intelligent Cluster Administrator, Insight Manager). The vulnerability allows the management HTTP server to act as a generic proxy, e...

CVE-2001-0028

CVE-2001-0028 affects the oops WWW proxy server, version 1.5.2 and earlier, where a buffer overflow in the HTML parsing code can be triggered by a large number of " characters. The vulnerability allows remote attackers to execute arbitrary commands. The initial description does not specify affect...

Серьезные дырки в KTH Kerberos IV

Пользователь может указать krb4proxy для перенаправления запроса на авторизацию собственному прокси-серверу. В сочетании с переполнением буфера это дает возможность удаленного root-доступа. Локальный пользователь может указать собственные конфигурационные файлы, которые будут использованы для...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

pkc001.txt

/ pkc001.txt / -= SECURITY ADVISORY 001 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by th...

tinyProxy Long Connect Request Overflow

It was possible to make the remote service crash by sending it the command : connect AAA...AAAA:// It may be possible for an attacker to execute arbitrary code on this host thanks to this flaw. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10596; scriptversion "1.26"...

CVE-2000-1185

The CVE-2000-1185 entry concerns the telnet proxy component of the RideWay PN proxy server. According to the description, remote attackers can cause a denial of service by sending a flood of connections containing malformed requests. The primary documented impact is a partial loss of availability...