Netscape Server ?wp-* Publishing Tags Forced Directory Listing

The version of Netscape Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by using a crafted URL request with special tags such as '?wp-cs-dump' appended, to display a listing of the page directory, whic...

CVE-2000-0199

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password...

GameHouse dldisplay - ActiveX control 0 Real Server 5.07.0 Internal IP Address Disclosure

GameHouse dldisplay - ActiveX control 0 Real Server 5.07.0 Internal IP Address Disclosure source: https://www.securityfocus.com/bid/1049/info By default, Real Server includes the IP address of the server in data sent to the client. If the Real Server is installed on a machine in a NAT environment...

CVE-2000-0225

The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled...

rpm_query CGI System Information Disclosure

The rpmquery CGI is installed. This CGI allows anyone who can connect to this web server to obtain the list of the installed RPMs. This allows an attacker to determine the version number of your installed services, hence making their attacks more accurate. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...

Zeus Web Server 3.x - Null Terminated Strings

source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in directories which are designated as executable eg...

CVE-2000-0146

The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet...

CVE-1999-0929

Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests...

CVE-1999-0533

A DNS server allows inverse queries...

CVE-1999-0882

The Falcon web server is affected by CVE-1999-0882: remote attackers can determine the absolute path of the web root by exploiting long file names, revealing an information disclosure issue in path handling. Affected product: Falcon web server (exact versions not specified in the provided documen...

CVE-1999-0736

The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

CVE-1999-0220

CVE-1999-0220 describes a denial-of-service against IRC servers achieved by crashing the server. Connected sources reiterate an IRC DoS impact but do not specify affected products, versions, or root-cause details. PT-1999-1014 notes affected versions are not specified; Red Hat and NVD entries sim...

CERN httpd Virtual Web Path Disclosure

The remote host appears to be running CERN httpd. It was possible to get the physical location of a virtual web directory by issuing the request : GET /cgi-bin/ls HTTP/1.0 A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc";...

CVE-1999-1451

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files...

Real Networks Real Server 5.0 - ramgen Denial of Service

Real Networks Real Server 5.0 - ramgen Denial of Service // source: https://www.securityfocus.com/bid/888/info RealServer 5.0 can be crashed by sending an overly long 4082+ bytes ramgen request. Regular functionality can be restored by restarting the RealServer software. / rmscrash.c - [email protected]...

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion

WU-FTPD 2.4.22.5 .02.6.02.6.12.6.2 - FTP Conversion source: https://www.securityfocus.com/bid/2240/info Some FTP servers provide a "conversion" service that pipes a requested file through a program, for example a decompression utility such as "tar", before it is passed to the remote user. Under...

CVE-1999-1010

An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy...

CVE-2000-0021

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...

Sambar Server cgitest.exe Remote Overflow

The remote host is running a vulnerable version of Sambar Server, a web server and web proxy. There is a remote buffer overflow vulnerability in 'cgitest.exe'. A remote attacker could use this to crash the web server, or potentially execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...