CVE-2007-0563

Symantec Web Security (SWS) is affected by CVE-2007-0563 due to multiple XSS vulnerabilities in versions prior to 3.0.1.85. The flaws allow remote attackers to inject arbitrary script or HTML via unspecified vectors related to error messages and blocked page messages produced by SWS. OpenVAS and ...

CVE-2006-5636

CVE-2006-5636 describes a PHP remote file inclusion vulnerability in the file common.php of Simple Website Software (SWS) 0.99 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the SWSDIR parameter, enabling remote code execution on affected servers...

Buffer overflow

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

Format string

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

CVE-2006-2115

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

CVE-2006-2114

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

CVE-2006-2114

Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request...

CVE-2006-2115

CVE-2006-2115 concerns the SWS web Server 0.1.7, where a format-string vulnerability in a syslog-related path allows remote attackers to potentially execute arbitrary code. The connected sources confirm the affected product and version and describe the root cause as improper handling of format st...

CVE-2006-2115

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

CVE-2006-2114

CVE-2006-2114 affects the SWS web Server 0.1.7. The vulnerability is a buffer overflow triggered by a long request, allowing remote attackers to execute arbitrary code. Public sources in the provided documents confirm this description; no additional exploit or mitigation details are included here...

linux/x86 SWAP store shellcode 99 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 SWAP store shellcode 99 bytes ======================================= / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors...

linux/x86 SWAP store shellcode 99 bytes

No description provided by source. / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the content of '/tmp/sws' and stores on swap device at offset 3133...

HTTP Unfinished Line DoS Vulnerability

We could crash the remote web server by sending an unfinished line. without a return carriage at the end of the line. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2002-1866

The CVE-2002-1866 issue affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The underlying root cause is that the server does not close file descriptors for 404 error responses, which can lead to resource exhaustion (denial of service) when an attacker issues numerous requests for non-e...

CVE-2002-1870

Simple Web Server SWS 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution...

CVE-2002-1870

CVE-2002-1870 affects Simple Web Server (SWS) versions 0.0.4–0.1.0. The root cause is improper handling of a failed recv() call, which may allow remote attackers to overwrite program data or operate on an uninitialized heap, leading to denial of service and potentially code execution. Connected s...

CVE-2002-2370

SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service crash via a URL request that does not end with a newline...

SWS Web Server Unfinished Line Remote DoS

The SWS web server running on this port crashes when it receives a request that doesn't end in a newline. An unauthenticated, remote attacker can exploit this vulnerability to disable the service. C Tenable Network Security, Inc. Modifications by rd: - Removed the numerous and slow calls to send...

SWS Simple Web Server 0.0.30.0.40.1 - New Line Denial of Service

SWS Simple Web Server 0.0.30.0.40.1 - New Line Denial of Service // source: https://www.securityfocus.com/bid/5664/info SWS Simple Web Server is prone to a denial of service when requests not ending with a newline are received. Remote attackers may exploit this condition to deny access to...

SWS Simple Web Server 0.0.3/0.0.4/0.1 - New Line Denial of Service

// source: https://www.securityfocus.com/bid/5664/info SWS Simple Web Server is prone to a denial of service when requests not ending with a newline are received. Remote attackers may exploit this condition to deny access to legitimate users of the web server. / Mon Sep 2 17:45:04 2002 |SaMaN| ak...