CVE-2000-0897

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed...

CVE-2001-0493

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux...

Advisory for Small HTTP Server

Advisory for Small HTTP Server v2.03 Site: http://feokt.spb.ru by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0111 /-|=explanation=|- Small HTTP Server is a webserver. It has a simple denial of service. /-|=who is vulnerable=|- Anyone running Small HTTP Server v2.03 and...

CVE-2000-0899

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests...

CVE-2000-0898

Small HTTP Server 2.01 does not properly process Server Side Includes SSI tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file...

CVE-2000-0897

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed...

CVE-2000-0898

Small HTTP Server 2.01 does not properly process Server Side Includes SSI tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file...

CVE-2000-0899

CVE-2000-0899 affects Small HTTP Server 2.01. The vulnerability allows remote attackers to cause a denial of service by establishing connections and issuing multiple GET, HEAD, or POST requests, then closing the connection before the server responds. Exploitation details are not provided in the s...

CVE-2000-0898

CVE-2000-0898 affects Small HTTP Server 2.01. The issue is improper handling of Server Side Includes (SSI) tags containing null values, allowing local users and possibly remote attackers to crash the server by inserting an SSI into an HTML file. The NVD data indicates partial impact to availabili...

CVE-2000-0899

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests...

WatchGuard SOHO v2.2.1 DoS

===================================================================== Securax-SA-10 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Watchguard SOHO 2.2 Denial of Service Announced: 2000-12-04 Affects: Watchguard SOHO...

NetcPlus SmartServer3 3.75 - Weak Encryption

/ source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access to passwords. SmartServer3 by default intsall...

Small HTTP Server 2.0 1 - Non-Existent File Denial of Service

source : https://www.securityfocus.com/bid/1941/info Small HTTP Server is a full service web server. This utility is less than 30Kb and requires minimal system resources. Small HTTP Server is subject to a denial of service. When making an http request without a filename specified the server will...

Small HTTP Server 2.0 1 - Non-Existent File Denial of Service

Small HTTP Server 2.0 1 - Non-Existent File Denial of Service source : https://www.securityfocus.com/bid/1941/info Small HTTP Server is a full service web server. This utility is less than 30Kb and requires minimal system resources. Small HTTP Server is subject to a denial of service. When making...

CVE-2000-0484

The CVE-2000-0484 entry describes a memory corruption flaw in Small HTTP Server v3.06 that leads to a memory overflow and a crash of the Structured Exception Handler, resulting in a Denial of Service. The affected component is the server’s memory handling for requests; the root cause is a memory ...

Evolvable Shambala Server 4.5 - Denial of Service

source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection requests. Successful exploitation could lead to...

Evolvable Shambala Server 4.5 - Denial of Service

Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...

smallhttp.py

!/usr/bin/python Small HTTP Server DoS Proof of Concept Code. Vulnerability Discovered by USSR Labshttp://www.ussrback.com Simple Script by [email protected] By connecting to port 80http on a system running Small HTTP Server and issuing a GET command followed by 65000 bytes, the service...

Переполнение буфера в Small HTTP

Переполнение буфера при длинном GET-запросе...

Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability USSR Advisory Code: USSR-2000047 Release Date: June 16, 2000 Systems Affected: Small HTTP Server ver. 1.212 maybe others THE PROBLEM The Ussr Labs team has recently discovered a buffer...