T. Hauck Jana Server 1.451.462.0 - MS-DOS Device Name Denial of Service

T. Hauck Jana Server 1.451.462.0 - MS-DOS Device Name Denial of Service source: https://www.securityfocus.com/bid/2704/info Versions of Jana Server are vulnerable to a denial of service attack. It is possible to remotely crash a system running Jana Server by submitting a URL request which specifi...

Vulnerability in WebXQ Server

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in WebXQ Server Overview WebXQ v2.1.204 is a web server available from http://www.datawizard.net. A vulnerability exists which allows a remote user to break out of the ftp root. Details The following URL demonstrates t...

WFTPD 3.0 - RETR CWD Remote Buffer Overflow

WFTPD 3.0 - RETR CWD Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attack...

Simpleserver WWW 1.0.x - AUX Directory Denial of Service

Simpleserver WWW 1.0.x - AUX Directory Denial of Service source: https://www.securityfocus.com/bid/2608/info Simpleserver:WWW is a freely available web server from AnalogX. Simpleserver:WWW is designed to provide an easy to use web server with a friendly interface. A problem with the web server...

Simpleserver WWW 1.0.x - AUX Directory Denial of Service

source: https://www.securityfocus.com/bid/2608/info Simpleserver:WWW is a freely available web server from AnalogX. Simpleserver:WWW is designed to provide an easy to use web server with a friendly interface. A problem with the web server could lead to a Denial of Service to legitimate users. By...

CVE-2001-1426

Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...

Network Time Protocol Daemon (ntpd) readvar Variable Overflow RCE

The remote NTP server is affected by a buffer overflow condition due to improper bounds checking on the 'readvar' argument. An unauthenticated, remote attacker can exploit this, via a specially crafted request that uses an overly long argument, to execute arbitrary code with root privileges. C...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

CVE-2001-0177

WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone...

Vulnerability in Novell Netware

The information in this advisory was supplied by Chris Hughes [email protected]. This security advisory is not endorsed by Security-Focus.com. Vulnerability in Novell Netware Date Published: 03/08/01 Advisory ID: n/a Bugtraq ID: 2446 CVE CAN: None currently assigned. Title: Novell Netware Print...

Michael Lamont Savant Web Server 3.0 - Denial of Service

Michael Lamont Savant Web Server 3.0 - Denial of Service source: https://www.securityfocus.com/bid/2468/info A denial of service condition exists in Michael Lamont Savant web server. Requesting a specially crafted URL composed of '%' characters could cause the server to stop responding...

Michael Lamont Savant Web Server 3.0 - Denial of Service

source: https://www.securityfocus.com/bid/2468/info A denial of service condition exists in Michael Lamont Savant web server. Requesting a specially crafted URL composed of '%' characters could cause the server to stop responding. www.target/%%%...

Broker Ftp Server 5.0 Vulnerability

Vulnerability: users can break out of their root directory and list directories. Depending on the priv. you have other commands like delete maybe executed outside of the home. directory. e:crap was used as homedir. deleting files in e:crap is enabled Detail: Problem: Again relative paths. dir:...

WhitSoft SlimServe HTTPd 1.01.1 - Directory Traversal

WhitSoft SlimServe HTTPd 1.01.1 - Directory Traversal source: https://www.securityfocus.com/bid/14132/info SlimServe HTTP server is prone to directory traversal attacks due to improper sanitization of user input. This type of attack allows a malicious user to read files that exist outside of the...

Sunftp build9(1) - ftp server Vulnerability

It is possible to break out of the root directory by using relative paths e:crap was used as homedir. of user test. the get command getting files from outside of the root dir. 220 chris FTP Server SunFTP b9 ready on port 21... Benutzer 10.17.3.44:none: test 331 Password required for test. Kennwor...

Vulnerability in FtpXQ Server

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in FtpXQ Server Overview FtpXQ Server 2.0.93 is an ftp server available from http://www.datawizard.net and http://www.download.com. A vulnerability exists which allows an attacker to download files outside the ftp root...

WebReflex 1.55 HTTPd DoS

Introduction: WebReflex is an easy to use web server that's easy to set up and use. It has many features like a limitless amount of concurrent requests, Drive and directory lists, Built in server side image-maps, Implementation of the CGI-WIN standard, User defined directory index files, User...

Pi3Web tstisap.dll Long URL Overflow

The '/isapi/tstisapi.dll' cgi is installed. This CGI has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the http service. In addition, it discloses the physical path to the web root if an invalid URL is requested. %NASLMINLEVEL 70300 C Tenable Networ...

Vulnerability in SEDUM HTTP Server

Vulnerability in SEDUM HTTP Server Overview SEDUM HTTP Server v2.0 is a web server available from http://www.frassetto.it and http://www.zdnet.com. A vulnerability exists which allows a remote user to break out of the web root using relative paths ie: '..', '...'. Details http://localhost/../file...