EUVD-2003-0101

Malware in sbrugna...

CVE-2003-0105

ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...

CVE-2003-0105

ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...

CVE-2003-0105

CVE-2003-0105 applies to Port80 Software ServerMask (2.2 and earlier) and documents that the product does not obfuscate certain HTTP headers, enabling potential fingerprinting of IIS by observers. The CVE notes that ETag, HTTP status messages, and Allow responses can reveal the underlying web ser...

Corsaire Security Advisory - Port80 Software ServerMask inconsistencies

-- Corsaire Security Advisory -- Title: Port80 Software ServerMask inconsistencies Date: 24.02.03 Application: Port80 Software ServerMask 2.2 and prior Environment: IIS 4 / IIS 5 / IIS 5.1 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030224-001 -- Sco...

Port80 Software ServerMask protection bypass

Multiuple remote server type detection methods are available...

Corsaire Security Advisory 2003-02-24.1

-- Corsaire Security Advisory -- Title: Port80 Software ServerMask inconsistencies Date: 24.02.03 Application: Port80 Software ServerMask 2.2 and prior Environment: IIS 4 / IIS 5 / IIS 5.1 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030224-001 -- Sco...