CVE-2002-1417: Undefined Security Weakness

Directory traversal vulnerability in Novell NetBasic Scripting Server NSN for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence modified dot-dot, which is mapped to the directory separator...

DLINK 614+ - SOHO routers, system DOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: DLINK 614+ - SOHO routers, system DOS http://www.dlink.com TYPE: ressources starvation / system denial of service QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments,...

DLINK 614+ - SOHO routers, DHCP service DOS

TITLE: DLINK 614+ - SOHO routers, DHCP service DOS http://www.dlink.com TYPE: signedness bug QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their patented Digital Signal ProcessingTM technology, and D-Link?s...

PT-2004-1571 · Heimdal · Heimdal K5Admind

Name of the Vulnerable Software and Affected Versions: Heimdal k5admind kadmind affected versions not specified Description: The issue allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request. This is due to a heap-based buffer overflow that occurs...

CVE-2004-0002

The TCP MSS maximum segment size functionality in netinet allows remote attackers to cause a denial of service resource exhaustion via 1 a low MTU, which causes a large number of small packets to be produced, or 2 via a large number of packets with a small TCP payload, which cause a large number ...

IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability

IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...

PoPToP buffer overflow

Buffer overflow on small packet length in PPTP header...

CVE-2002-1417

Directory traversal vulnerability in Novell NetBasic Scripting Server NSN for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence modified dot-dot, which is mapped to the directory separator...

Multiple bugs in SMALL HTTP Server

FTP access to whole disk is open by default, passwords are stored in cleartext, password submission attemps are not limited...

Исследуем Small HTTP

Я подключался к одной локальной сети через модем и мне не нравился там админ. У него машина 2000 server была пропатчена но однажду он установи у себя Small HTTP Server ver.3.0371 и понеслось. Я нашёл Small HTTP Server ver.3.0371 в нете, установил к себе и начал тестировать, чтобы сделать чё нить...

Evolvable Shambala Server 4.5 - Web Server Denial of Service

Evolvable Shambala Server 4.5 - Web Server Denial of Service // source: https://www.securityfocus.com/bid/4897/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. It has been reported that Shambala Server's web server may be prone to a denial of...

Smalls holes on 5 products #1

Products : - THTTPD v2.20b - Sgdynamo - Myannuaire v1.0 - phpAnyvote v1.0 - DiSi-Poll 0.9.0 More details in french : http://www.ifrance.com/kitetoua/tuto/5holes1.txt translated by google : http://translate.google.com/translate?u=http3A 2F2Fwww.ifrance.com2Fkitetoua2Ftuto...

CVE-2001-0493

The CVE describes a denial-of-service in Small HTTP Server 2.03 when handling HTTP requests that contain MS-DOS device names (for example AUX) in the URL. The underlying cause is improper handling of device-name paths, allowing a remote attacker to crash or freeze the server (Windows 98 reference...

CVE-2001-0493

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux...

CVE-2001-0493: Undefined Security Weakness

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux...

CVE-2001-1007: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...

netgear.txt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =+ NetGear RO318 HTTP Filter Advisory =+ =+ Null Byte Security =+ =+ http://home.tampabay.rr.com/nbs/ =+ =+ don't call it a come back =+ =+ [email protected] =+...

Атака - получение фрагментов памяти через ICMP

При передаче фрагментированного пакета с маленьким TTL сервер отвечает пакетом полной длины, в котором "недостающее" место занято информацией из оперативной памяти...

Проблемы с MAC-фильтрацией в iptables (protection bypass)

Не проверяются правила для мелких пакетов...

CVE-2000-0897

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed...