JBoss %00 Request JSP Source Disclosure

It is possible to make the remote web server disclose the source code of its JSP pages by appending a NULL character to the name of the JSP files requested eg, 'foo.jsp%00'. An attacker may use this flaw to get the source code of scripts on the remote host and possibly obtain passwords and other...

Pi3Web Malformed GET Request Remote Overflow

The remote Pi3Web web server may crash when it is sent a malformed request, like : GET //?SortName=A This issue may allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11695;...

JBoss.txt

Hi, jboss 3.2.1 with jetty seems to be vulnerable to jsp source code disclosure. Trying to access the ServerInfo.jsp with an suffixed "%00" shows the source code of this JSP. Seems to be a forgotten debug feature :- http://192.168.0.4:8080/web-console/ServerInfo.jsp%00 Sincerely Marc Schoenefeld...

Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...

Super-M Son hServer URI Traversal Arbitrary File Access

Super-M Son hServer is vulnerable to a directory traversal. It enables a remote attacker to view any file on the computer with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11678; scriptversion"1.22";...

Zeus Web Server 4.x - Admin Interface VS_Diag.cgi Cross-Site Scripting

Zeus Web Server 4.x - Admin Interface VSDiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, ...

Webfroot Shoutbox 2.32 - 'URI' File Disclosure

source: https://www.securityfocus.com/bid/7737/info Shoutbox is prone to directory traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to URI parameters. An attacker can exploit this vulnerability by manipulating the value of the affected 'conf' UR...

Synchrologic Email Accelerator aggregate.asp User Account Disclosure

The remote host seems to be running Synchrologic Email Accelerator Synchrologic is a product which allows remote PDA users to sync with email, calendar, etc. If this server is on an Internet segment as opposed to internal, you may wish to tighten the access to the aggregate.asp page. The server...

BaSoMail 1.24 - POP3 Server Denial of Service

BaSoMail 1.24 - POP3 Server Denial of Service source: https://www.securityfocus.com/bid/7724/info BaSoMail POP3 server has been reported prone to a remote denial of service vulnerability. It has been reported that a remote authenticated attacker, may supply negative value integers to several POP3...

ShareMailPro POP3 Interface Error Message Account Enumeration

The remote ShareMail server issues a special error message when a user attempts to log in using a nonexistent POP account. An attacker may use this flaw to make a list of valid accounts by looking at the error messages it receives at authentication time. C Tenable Network Security, Inc...

Batalla Naval 1.0 4 - Remote Buffer Overflow (2)

Batalla Naval 1.0 4 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game...

Batalla Naval 1.0 4 - Remote Buffer Overflow (1)

Batalla Naval 1.0 4 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/7699/info Batalla Naval is prone to a remotely exploitable buffer overflow when handling requests of excessive length. This could allow for execution of malicious instructions in the context of the game serve...

CVE-2003-0322

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

Maelstrom Server 3.0.x - Argument Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7630/info Maelstrom for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an internal memory space. It may be...

Eserv Non-Terminated Connection Saturation DoS

The remote host is running Eserv HTTP/SMTP/FTP server. According to its version number, there is a memory leak in this software which allows any attacker to consume all the available memory on this host by making repeated requests to this service. C Tenable Network Security, Inc. From: "Matthew...

Ikonboard FUNC.pm lang Cookie Arbitrary Command Execution

The remote server is running IkonBoard, a forum management CGI. The installed version fails to properly sanitize the 'lang' cookie when it contains illegal characters. An attacker, exploiting this flaw, could execute arbitrary code on the remote host when the cookie is inserted into a Perl 'eval'...

12Planet Chat Server Error Message Path Disclosure

The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...

12Planet Chat Server Administration Authentication Cleartext Credential Disclosure

The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...

MDG Web Server 4D GET Request Remote Overflow

It is possible to kill the web server by sending an oversized string of '' as an argument to a GET request. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. include 'compat.inc' ;...

FTP Server root Directory .rhosts File Present

The remote anonymous FTP server has a .rhosts file set in its home directory. An attacker may use it to determine the trust relationships between this server and other hosts on the network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11566; scriptversion"$Revision:...