669 matches found
Orenosv buffer overflow
Buffer overflow on parsing GET request...
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear...
SP Research Labs Advisory 12
SP Research Labs Advisory x12 ----------------------------- BNBT BitTorrent Tracker Denial Of Service ----------------------------------------- Versions: cbtt7520040515 Beta 7.5 Release 2 and prior versions Vendors: http://bnbt.go-dedicated.com/ http://bnbteasytracker.sourceforge.net/...
Web Crossing Web Server 4.0/5.0 Component - Remote Denial of Service
source: https://www.securityfocus.com/bid/9576/info The Web Crossing Web Server component has been reported prone to a remote denial of service vulnerability. It has been reported that the issue will present itself when the affected web server receives a malicious HTTP request that contains...
CVE-2004-0046
Cross-site scripting XSS vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' double quote character...
CVE-2003-1408
Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...
TCM315.txt
. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...
Thomnson TCM315 Denial of service
. : Shell Security Advisory : . Subject: Buffer overflow in the cable modem Thomson TCM315 Issue date: 2003 November 23 Related link: http://www.shellsec.net/leeradvisory.php?id=2 Homepage: http://www.shellsec.net Info about product: http://www.qb.ro/docs/tcm315.pdf - 1 - Introduction...
CVE-2003-0424
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...
ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS
It is possible to kill the remote HTTP server by sending an invalid request to it. An unauthenticated attacker may leverage this issue to crash the affected server. C Tenable Network Security, Inc. From: "[email protected]" To: [email protected] Subject: Denial of Service Attack against...
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // double slash...
CVE-2003-0338
Directory traversal vulnerability in WsMp3 daemon WsMp3d 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. dot dot sequences in HTTP GET or POST requests...
monkeyHTTPd.txt
Monkey HTTP Daemon Remote Buffer Overflow ABSTRACT "Monkey is a Web server written in C that works under Linux. This is an open source project based on the HTTP/1.1 protocol. The objective is to develop a fast, efficient, small and easy to configure web server." quote from...
CVE-2003-0181
Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...
CVE-2002-1557
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service reset to TCC, TCC+, TCCi or XTC via a malformed HTTP request that does not contain a leading / slash character...
3ware Disk Managment 1.10 - HTTP Request Denial of Service
3ware Disk Managment 1.10 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6734/info A denial of service condition has been reported in 3ware's Disk Management 3DM by sending a malformed HTTP request to port 1080. Successful exploitation of this vulnerability may cause t...
CVE-2002-2177
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users...
IBM WebSphere HTTP Request Header Remote Overflow
It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. An attacker may exploit this vulnerability to make your web server crash continually. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References... From:"PeterGrundl"...
Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service
Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can...