CVE-2007-3407

CVE-2007-3407 affects Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier. It allows remote attackers to disclose script source code by sending a URI with a trailing encoded space (%20), causing information disclosure. The root cause is improper handling of a trailing %20 in the request. The con...

SHTTPD V1.38 server source code disclosure

SHTTPD V1.38 server source code disclosure ------------------------------------ link:http://shttpd.sourceforge.net/ info: The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files...

SHTTPD HTTP server information leak

It's possible to access scripts source code with request of kind http://127.0.0.1/test.php20...

CVE-2007-3407: Undefined Security Weakness

Sergey Lyubka Simple HTTPD shttpd 1.38 allows remote attackers to obtain sensitive information script source code via a URL with a trailing encoded space %20...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

SHTTPD 1.38 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD 1.38; other versions may also be affected...

SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC4358 , EDI...

SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================= SHTTPD 1.34 POST Remote Buffer Overflow Exploit ================================================= !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew...

shttpd134.txt

!/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC4358 , EDI 00BCC3CC ASCII "POST" ESP 009EFC08...

CVE-2006-5216: Undefined Security Weakness

Stack-based buffer overflow in Sergey Lyubka Simple HTTPD shttpd 1.34 allows remote attackers to execute arbitrary code via a long URI...

shttpd web server buffer overflow

Buffer overflow on oversized POST request URL...

SHTTPD URI-Encoded POST Request Overflow

This module exploits a stack buffer overflow in SHTTPD use exploit/windows/http/shttpd/post msf undefinedpost show actions ...actions... msf undefinedpost set ACTION msf undefinedpost show options ...show and set options... msf undefinedpost run This module requires Metasploit:...

SHTTPD 1.34 - POST Remote Buffer Overflow

SHTTPD 1.34 - POST Remote Buffer Overflow !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC435...

SHTTPD 1.34 - 'POST' Remote Buffer Overflow

!/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC4358 , EDI 00BCC3CC ASCII "POST" ESP 009EFC08...

ASP/PHP '%20' Source Code Disclosure Vulnerability - Active Check

Multiple products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi SPDX-FileCopyrightText: New code / detection methods since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...