CVE-2004-2763

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are vulnerable to cross-site scripting...

CVE-2004-2763

The Red Hat and SUSE entries for CVE-2010-0386 describe the same class of issue as CVE-2004-2763: default installations of Sun Java System Application Server 7 enable the HTTP TRACE method, enabling cross-site tracing that can expose cookies and credentials. This is a related but distinct advisor...

PT-2009-1145

Name of the Vulnerable Software and Affected Versions Sun ONE/iPlanet Web Server versions 4.1 SP1 through 4.1 SP12 Sun ONE/iPlanet Web Server versions 6.0 SP1 through 6.0 SP5 Description The default configuration of the web server responds to the HTTP TRACE request, which can allow remote attacke...

Mozilla Firefox (unclamped loop) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ========================================================== Mozilla Firefox unclamped loop Denial of Service Exploit ========================================================== From the low-hanging-fruit-department Firefox et al. Denial of Service...

HTTP Options Detection

Display available HTTP options for each system This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Options Detection', 'Description' = 'Display available HTTP options for each system', 'Author...

Mandriva Update for squid MDKSA-2007:068 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:068 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for squid vulnerability USN-441-1

Ubuntu Update for Linux kernel vulnerabilities USN-441-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4411.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for squid vulnerability USN-441-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability

Overview A vulnerability in JP1/Cm2/Network Node Manager NNM could cause a denial of service DoS condition when using the Shared Trace Service. Impact A remote attacker could cause a denial of service DoS condition. Solution Please refer to the 'Vendor Information' section for the official...

CVE-2003-1567

The CVE-2003-1567 issue concerns the undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0, which reportedly echoes parts of the original request back in the response body. This behavior could allow remote attackers to read sensitive information from HTTP headers, includi...

SOL2452 - Vulnerabilities in the HTTP TRACE method - VU#867593

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to SOL4602: Overview of F5 security vulnerability respons...

http-trace NSE Script

Sends an HTTP TRACE request and shows if the method TRACE is enabled. If debug is enabled, it returns the header fields that were modified in the response. Script Arguments http-trace.path Path to URI slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size,...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

Out-of-bounds

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

HP OpenView产品Trace服务RPC请求拒绝服务漏洞

BUGTRAQ ID: 31860 CVECAN ID: CVE-2007-4349 HP OpenView是惠普公司开发的系列网络管理软件。 HP OpenView产品的Trace服务在TCP 5051或5053端口上所暴露的RPC服务没有要求认证，如果向该端口发送了特定序列的RPC请求的话，就可能错误的引用对象，导致引用所分配缓冲区范围之外的内存。成功利用这个漏洞只能导致拒绝服务的情况。 HP OpenView Report 3.70 HP Performance Agent 4.70 HP --...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Design/Logic Flaw

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Black the world God soldiers-Cain-the-vulnerability warning-the black bar safety net

You can right-click for playback. Below we to carry out Arp spoofing, click on the following“ARP”tab ! 1 4） On the right side of the blank at a click, and then point above the“plus sign”, the emergence of the“new ARP spoofing”dialog box, in the left of the selected Gateway, the right choice is...

Ruby multiple insufficient safe mode restrictions

Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via 1 untracevar, 2...

JP1/Cm2/Network Node Manager Arbitrary Code Execution Vulnerability

Overview Shared Trace Service in JP1/Cm2/Network Node Manager NNM is vulnerable to arbitrary code execution. Impact An attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for the vendor recommended workaround...