CVE-2004-2763

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are vulnerable to cross-site scripting...

CVE-2004-2763

The Red Hat and SUSE entries for CVE-2010-0386 describe the same class of issue as CVE-2004-2763: default installations of Sun Java System Application Server 7 enable the HTTP TRACE method, enabling cross-site tracing that can expose cookies and credentials. This is a related but distinct advisor...

PT-2009-1145

Name of the Vulnerable Software and Affected Versions Sun ONE/iPlanet Web Server versions 4.1 SP1 through 4.1 SP12 Sun ONE/iPlanet Web Server versions 6.0 SP1 through 6.0 SP5 Description The default configuration of the web server responds to the HTTP TRACE request, which can allow remote attacke...

CVE-2004-2763: Undefined Security Weakness

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are vulnerable to cross-site scripting...

Mozilla Firefox (unclamped loop) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ========================================================== Mozilla Firefox unclamped loop Denial of Service Exploit ========================================================== From the low-hanging-fruit-department Firefox et al. Denial of Service...

HTTP Options Detection

Display available HTTP options for each system This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Options Detection', 'Description' = 'Display available HTTP options for each system', 'Author...

Mandriva Update for squid MDKSA-2007:068 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:068 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for squid vulnerability USN-441-1

Ubuntu Update for Linux kernel vulnerabilities USN-441-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4411.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for squid vulnerability USN-441-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability

Overview A vulnerability in JP1/Cm2/Network Node Manager NNM could cause a denial of service DoS condition when using the Shared Trace Service. Impact A remote attacker could cause a denial of service DoS condition. Solution Please refer to the 'Vendor Information' section for the official...

CVE-2003-1567

The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the original request content in the response body. This allows remote attackers to read HTTP headers, potentially leading to the theft of cookies and authentication credentials , or the bypass of the HttpOn...

SOL2452 - Vulnerabilities in the HTTP TRACE method - VU#867593

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to SOL4602: Overview of F5 security vulnerability respons...

http-trace NSE Script

Sends an HTTP TRACE request and shows if the method TRACE is enabled. If debug is enabled, it returns the header fields that were modified in the response. Script Arguments http-trace.path Path to URI slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size,...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

Out-of-bounds

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

CVE-2007-4349: Undefined Security Weakness

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

HP OpenView产品Trace服务RPC请求拒绝服务漏洞

BUGTRAQ ID: 31860 CVECAN ID: CVE-2007-4349 HP OpenView是惠普公司开发的系列网络管理软件。 HP OpenView产品的Trace服务在TCP 5051或5053端口上所暴露的RPC服务没有要求认证，如果向该端口发送了特定序列的RPC请求的话，就可能错误的引用对象，导致引用所分配缓冲区范围之外的内存。成功利用这个漏洞只能导致拒绝服务的情况。 HP OpenView Report 3.70 HP Performance Agent 4.70 HP --...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Design/Logic Flaw

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4693: Exposure of Sensitive Information to an Unauthorized Actor

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...