77 matches found
CVE-2005-4216
The vulnerability CVE-2005-4216 affects Macromedia Flash Media Server 2.0 r1145, specifically the Administration Service (FMSAdmin.exe). It allows remote attackers to trigger a denial-of-service (application crash) by sending a malformed request (one character) to TCP port 1111. The issue is caus...
CVE-2002-1862
SmartMail Server 2.0 allows remote attackers to cause a denial of service crash by sending data and closing the connection before all the data has been sent...
CVE-2005-0635
Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command...
CVE-1999-1397
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, enabling local and remote users to obtain the physical paths of indexed directories. Affected component: ContentIndex\Catalogs under AllowedPaths. Root cause: registr...
Microsoft Private Communication Technology (PCT) fails to properly validate message inputs
Overview A vulnerability exists in the Private Communications Transport PCT protocol, which is part of the Microsoft Secure Sockets Layer SSL library. Exploitation of this vulnerability may permit a remote attacker to compromise the system. An exploit for this issue currently being used to...
CVE-2001-0500
CVE-2001-0500 is a buffer-overflow in the IDQ ISAPI handler (idq.dll) used by Microsoft IIS Indexing Service/Index Server 2.0 (and IIS 6.0 beta and earlier). The vulnerability allows remote attackers to execute arbitrary commands by sending a long argument to the .ida and .idq entry points (e.g.,...
CVE-2001-0986
SQLQHit.asp is a sample component of Microsoft Index Server 2.0 that, when reachable via CiScope values webinfo/extended_fileinfo/extended_webinfo/fileinfo, can disclose directories and file paths on the server. The vulnerability stems from a design/implementation flaw in the SQLQHit CGI that all...
CVE-2001-0244
The CVE-2001-0244 issue concerns Microsoft Index Server 2.0, where a buffer overflow in the index/search parameter handling allows remote attackers to execute arbitrary commands. The core affected component is Microsoft Index Server 2.0 (server-side indexing/search functionality); the root cause ...
CVE-2001-0245
Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...
CVE-2001-0500
Buffer overflow in ISAPI extension idq.dll in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration .ida and Internet Data Query .idq files such as default.ida, as commonly...
CVE-2001-0263
Gene6 G6 FTP Server 2.0 (BPFTP Server 2.10) is affected by an information-disclosure flaw where attackers can read file attributes outside the FTP root via SIZE and MDTM when the show relative paths option is disabled. Root cause: inadequate restriction of access to attributes outside the FTP roo...
CVE-2001-0256
CVE-2001-0256 affects FaSTream FTP++ Server 2.0. A remote attacker can cause a denial of service and possibly execute arbitrary commands by supplying a long username, indicating an input handling vulnerability. CVSS v2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediation details are provid...
CVE-2001-0255
FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...
CVE-2001-0226
CVE-2001-0226 describes a directory traversal vulnerability in BiblioWeb web server 2.0 where an attacker can read arbitrary files by exploiting .. or ... patterns in an HTTP GET request. This is a remote, unauthenticated attack that targets the server’s file path handling and allows partial conf...
CVE-1999-0360
CVE-1999-0360 affects MS Site Server 2.0 on IIS 4, where the web server can accept uploaded content (including ASP), enabling remote command execution. A Nessus plugin notes a specific verifiable vector: the repost.asp script allows uploading arbitrary files to /Users when misconfigured. Root cau...
ms-iis4-siteserver2.txt
Date: Sat, 30 Jan 1999 13:02:09 -0000 From: mnemonix To: [email protected] Subject: Security Advisory for Internet Information Server 4 with Site Server 2. The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be...
