511 matches found
F5 BIG-IP Cookie Remote Information Disclosure
The remote host appears to be an F5 BIG-IP load balancer. The load balancer encodes the IP address of the actual web server that it is acting on behalf of within a cookie. Additionally, information after 'BIGipServer' is configured by the user and may be the logical name of the device. These valu...
MS Windows IIS 5.0 (500-100.asp) Server Name Spoof Exploit
No description provided by source. / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof PoC File:...
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...
CVE-2003-1174
Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via 1 icy-name followed by a long server name or 2 icy-url followed by a long URL...
CVE-2004-0345
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name...
CVE-2004-0345: Undefined Security Weakness
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name...
CVE-2003-0870: Out-of-bounds Write
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name...
CVE-2002-0726: Undefined Security Weakness
Buffer overflow in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to execute arbitrary code via a long server name field...
security flaw
Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...
CVE-1999-1359
The CVE-1999-1359 entry concerns Windows NT where, when the Ntconfig.pol file is used on a server with a name longer than 13 characters, policies for global groups are not properly enforced. This could allow bypass of restrictions intended by those policies (as described in multiple sources). Aff...
