CVE-2002-1021

BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte...

CVE-2002-0876

Web server for Shambala 4.5 allows remote attackers to cause a denial of service crash via a malformed HTTP request...

Important: Red Hat Security Advisory: : PXE server crashes from certain DHCP packets

Updated PXE packages are now available for Red Hat Linux which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was...

Samba enum_csc_policy Data Structure Termination Remote Overflow

The remote Samba server, according to its version number, is vulnerable to a possible buffer overflow because it fails to properly terminate the 'enumcscpolicy' struct. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exis...

Caldera X Server 7.1/8.0 - External Program Privileged Invocation

source: https://www.securityfocus.com/bid/5575/info Caldera's X Server implementation invokes external commands without dropping existing privilege levels. Xserver calls xkbcomp, and other related utilities, in an unsecure manner using the popen or system calls. While this would not typically be ...

AnyForm CGI Arbitrary Command Execution

The CGI 'AnyForm2' is installed on the remote web server. Old versions of this CGI have a well known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Blazix 1.2 jsp view and free protected folder access

Auriemma Luigi, PivX security advisory Application: Blazix http://www.blazix.com Version: 1.2 and previous Bug: Bad management of files requested with at the end some "bad" characters Risk low: An attacker can view jsp and other server side scripts with the ability to access any password protecte...

Apache Tomcat 4.1 - JSP Request Cross-Site Scripting

Apache Tomcat 4.1 - JSP Request Cross-Site Scripting source: https://www.securityfocus.com/bid/5542/info Jakarta Tomcat is a Java Servlet and JSP server produced by the Apache Software Foundation. Tomcat is available for Microsoft Windows, Linux, and other Unix based operating systems. A cross si...

Web Server HTTP Header Memory Exhaustion DoS

It was possible to kill the web server by sending an invalid 'infinite' HTTP request that never ends, like: GET / HTTP/1.0 Referer: XXXXXXXXXXXXXXXXXXXXXXXX ... An attacker may exploit this vulnerability to make your web server crash continually if the attack saturates virtual memory on the targe...

Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_execresultset" extended procedure

Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpexecresultset , that permits an unprivileged user of a database to gain administrative...

Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_printstatements" extended procedure

Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpprintstatements , that permits an unprivileged user of a database to gain administrative...

Sun AnswerBook2 Web Server dwhttpd GET Request Remote Format String

The remote web server is vulnerable to a format string attack. An attacker may exploit this vulnerability to cause the web server to crash continually or even execute arbitrary code on the system. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anders...

Web Server HTTP Header Handling Remote Overflow

It was possible to kill the web server by sending an invalid request with a long header name or value. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Multiple Web Server Encoded Space (%20) Request ASP Source Disclosure

It appears possible to get the source code of the remote ASP scripts by appending a '%20' to the request. ASP source code usually contains sensitive information such as logins and passwords. This has been reported in Simple HTTPD shttpd, Mono XSP for ASP.NET and vWebServer. This type of request m...

Web Server HTTP User-Agent Header Handling Remote Overflow

It was possible to kill the web server by sending an invalid GET request with a long User-Agent field. A remote attacker may exploit this vulnerability to make the web server crash continually or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from...

Immunity Canvas: IPLANET_CHUNKED

Name| iplanetchunked ---|--- CVE| CVE-2002-0845 Exploit Pack| CANVAS Description| iPlanet Chunked Encoding Notes| References: http://www.sun.com/service/sunone/software/alerts/transferencodingalert-23july2002.html http://www.eeye.com/html/Research/Advisories/AD20020808a.html CVE Name: CVE-2002-08...

CVE-2002-0415

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. dot dot in an HTTP GET request to port 1275...

CVE-2002-0784

Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... modified dot dot...

CVE-2002-0763

Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server...

Microsoft SQL Server User Authentication Remote Buffer Overflow Vulnerability

Description A vulnerability has been discovered in Microsoft SQL Server that could make it possible for remote attackers to gain access to target hosts. It is possible for an attacker to cause a buffer overflow condition on the vulnerable SQL server with a malformed login request. This may allow ...