CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...

CVE-2001-1195

CVE-2001-1195 affects Novell GroupWise Servlet Manager (groupwise servlet server) with default credentials. Connected sources confirm that a default username/password (e.g., servlet/manager) enables remote attackers to access the servlet manager and potentially gain privileges. The OpenVAS entrie...

CVE-2001-1195: Undefined Security Weakness

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges...

CVE-2001-0590

CVE-2001-0590 affects Apache Tomcat Servlet prior to 3.2.2. A malformed URL request that does not end with a protocol (e.g., HTTP/1.0) can cause a remote attacker to read the source code of arbitrary JSP files, constituting information disclosure. The issue is confirmed in multiple sources tying ...

CVE-2001-0590: Undefined Security Weakness

Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification i.e. HTTP/1.0...

Oracle 9iAS XSQL Servlet ignores file permissions allowing arbitrary users to view sensitive configuration files

Overview It is possible to read the sensitive configuration files from an Oracle 9i Application Server without any authorization. This can lead to an intruder gaining access to sensitive information about the server and potentially compromising it. Description Default installation of the Oracle 9...

CVE-2001-1563

Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers...

Novell Groupwise servlet gateway default username and password

OS Affected NT/2000/Netware 5 Programs Affected Groupwise 5.5 Enhancement Pack Groupwise 6.0 Discussion A default username and password exists that controls the servlet manager. The servlet manager allows the configuration of the servlets to be loaded, reloaded or unloaded. This is more of an...

Дефолтный пароль в Novell Groupwise Servlett Manager (default password)

По-умолчанию исопльзуется username servlet password manager...

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote...

Novell Groupwise 5.5/6.0 Servlet Gateway - Default Authentication

source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote attacker may gain access to the Servlet Manager interface by enterin...

Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page

Overview Web servers that use the Resin Java Servlet Container, versions 1.2.3 and earlier, are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on unvalidat...

Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability

Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability ========================================================================= Affected products: ================= Tomcat 3.2.1, 3.2.2-beta, 4.0-beta http://jakarta.apache.org/tomcat/ JRun 3.0...

CVE-2001-0126

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet...

CVE-2001-0126

The vulnerability CVE-2001-0126 affects Oracle XSQL Servlet (versions 1.0.3.0 and earlier). An attacker can remotely cause arbitrary Java code execution by redirecting the XSQL server to a malicious source via the xml-stylesheet parameter in the XSLT stylesheet used by an XSQL page. This is a net...

CVE-2001-0126: Undefined Security Weakness

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet...

CVE-2001-0126

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet...

CVE-2000-1051

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet...

CVE-2000-0965

The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service high CPU utilization...

CVE-2000-1051

CVE-2000-1051 describes a directory traversal vulnerability in Allaire JRun 2.3 server where an attacker can read arbitrary files via the SSIFilter servlet. Affected software is Allaire JRun 2.3 server; the underlying flaw is in the SSIFilter servlet handling that allows path traversal. The NVD m...