Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)

A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...

XOOPS 2.0 XoopsOption - Information Disclosure

XOOPS 2.0 XoopsOption - Information Disclosure source: https://www.securityfocus.com/bid/7149/info XOOPS has been reported vulnerable to an information disclosure vulnerability. According to the report, path information and other sensitive data may be output in server error messages. Information...

IIS 5.0 Cross Site Scripting vulnerability

SYSTEMS AFFECTED ======== IIS 5.0 / Windows 2000 SP2 - SRP1 exploited with a browser CONTENTS ========= Subject: IIS 5.0 Cross Site Scripting Vulnerability Date: 27 September 2002 Risk: Medium DESCRIPTION ========= IIS 5.0 can be forced to return malicious content in user's browser. By using a...

CVE-2001-1073

CVE-2001-1073 affects Webridge PX Application Suite and enables information disclosure: a malformed request triggers a server error that reveals internal path/IP data in variables APPL_PHYSICAL_PATH, PATH_TRANSLATED, and LOCAL_ADDR. The description does not provide exploit specifics, affected ver...

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...

webridge application suite gives up too much error information on Internal Server Error

Hi. I accidently come across this error yesterday. Im not sure what to class it as but it sure is a bug of some kind. This occurred because I tried to view some pages on the site and forgot to remove the trailing slash so it had // at the end of the URL. Still it should not give up this informati...

CURL-CVE-2000-0973 FTP Server Response Buffer Overflow

When storing an FTP server's error message on failure, there was no check for input length and thus a malicious FTP server could overflow curl's stack based buffer...

WDK_v1.0.vuln.txt

../ bugs in the Java Web server Development kit built in servlet engine http://localhost:8080/../../../../etc/passwd below is my version info. JavaServertm WDK v1.0 EA elguapo@localhost elguapo$ telnet localhost 8080 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^'...

Tomcat 3.0/3.1 Snoop Servlet - Information Disclosure

source: https://www.securityfocus.com/bid/1532/info A vulnerability exists in the snoop servlet portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent file with the .snp extension, too much information is presented by the server as part of the...

Apache Tomcat 3.1 - Path Revealing

source: https://www.securityfocus.com/bid/1531/info A vulnerability exists in the JSP portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent JSP file, too much information is presented by the server as part of the error message. This informati...

netware50-sp5.dos.txt

Remote Denial Of Service -- NetWare 5.0 with SP 5 -------------------------------------------------------------- I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After few minutes after the attack server issue a memory allocation error. 10-07-2000 12:29:53 pm: SERVER-5.0-4631...

Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities

source: https://www.securityfocus.com/bid/1278/info A remote user may browse any known directory on a host running Fastraq Mailtraq 1.1.4 by making a URL request that includes the '../' string. In addition, requesting a URL appended with "../" and an unusually long character string will return an...