CVE-2002-1866

The CVE-2002-1866 issue affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The underlying root cause is that the server does not close file descriptors for 404 error responses, which can lead to resource exhaustion (denial of service) when an attacker issues numerous requests for non-e...

CVE-2002-1864

The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...

CVE-2002-1870: Undefined Security Weakness

Simple Web Server SWS 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution...

CVE-2002-1864: Undefined Security Weakness

Directory traversal vulnerability in Simple Web Server SWS 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP request...

CVE-2002-1866: Undefined Security Weakness

Simple Web Server SWS 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service file descriptor exhaustion via multiple requests for pages that do not exist...

CVE-2005-1173

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...

PMSoftware Simple Web Server - GET Remote Buffer Overflow

PMSoftware Simple Web Server - GET Remote Buffer Overflow / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic -...

PMSoftware Simple Web Server (GET Request) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================= PMSoftware Simple Web Server GET Request Remote BoF Exploit ============================================================= / PMSoftware Simple Web Server Buffer Overflow Exploit 3...

PMSoftware Simple Web Server - GET Remote Buffer Overflow

/ PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet Usage:...

ERNW Security Advisory 01/2005

ERNW Security Advisory 01-2005 Buffer Overflow in PMSoftware's Simple Web Server Author: Michael Thumann mthumannaternw.de 1. Summary: Simple Web Server doesn't do proper bounds checking handling normal GET requests. Sending an overlong page or script name, it causes an buffer overflow and an...

CVE-2005-1173: Undefined Security Weakness

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...

silentthought simple Web server 1.0 - Directory Traversal

silentthought simple Web server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it i...

silentthought simple Web server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to access sensitive...

CVE-2002-1864

Directory traversal vulnerability in Simple Web Server SWS 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP request...

CVE-2002-1866

Simple Web Server SWS 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service file descriptor exhaustion via multiple requests for pages that do not exist...

CVE-2002-1870

Simple Web Server SWS 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution...

CVE-2002-1238

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / slash characters such as http://www.example.com///file/...

CVE-2002-1238

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / slash characters such as http://www.example.com///file/...

CVE-2002-1238

CVE-2002-1238 affects Peter Sandvik’s Simple Web Server (version 0.5.1 and earlier). The issue arises from improper handling of malformed URLs with multiple slashes, allowing remote attackers to bypass access restrictions and disclose restricted files. The impact is remote file disclosure; the se...

CVE-2002-1238: Undefined Security Weakness

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / slash characters such as http://www.example.com///file/...