291 matches found
Xerox MicroServer - Web Server Directory Traversal
source: https://www.securityfocus.com/bid/9256/info It has been reported that XeroxMicroServer/Xerox11 may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/..' or '/.' character sequences at the end of a URL reques...
CVE-2002-0894
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...
CVE-2002-0894
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...
PVote 1.0/1.5 - Unauthorized Administrative Password Change
source: https://www.securityfocus.com/bid/4541/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible to change the administrative password by submitting a malicious web request containing the...
CVE-2001-0585
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long = 255 characters URL request to port 8000 or port 9000...
CVE-2001-0585
Gordano NTMail 6.0.3c is affected. A remote attacker can trigger a denial-of-service by sending a long URL request (≥ 255 characters) to port 8000 or 9000. The vulnerability and affected configuration are described in CVE-2001-0585 entries (NVD, CVE List). Exploitation details, affected versions ...
CVE-2001-0007
CVE-2001-0007 refers to a buffer overflow in NetScreen Firewall WebUI (ScreenOS) that allows remote DoS via an oversized URL. Exploitation crashes the firewall without login; reboot needed. Affected: various ScreenOS releases; fixed in: ScreenOS 1.73r2 (NetScreen-1000), 2.01r7 (NetScreen-10/100),...
CVE-2001-0585: Undefined Security Weakness
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long = 255 characters URL request to port 8000 or port 9000...
CVE-2001-0616: Undefined Security Weakness
Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...
CVE-2001-0626: Undefined Security Weakness
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
CVE-2001-0558: Undefined Security Weakness
T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...
CVE-2001-1513
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...
CVE-2001-0703
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter...
CVE-2001-0585
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long = 255 characters URL request to port 8000 or port 9000...
CVE-2001-0613
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request...
CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
CVE-2001-0467
Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a ... modified dot dot in an HTTP URL request...
CVE-2001-0367: Undefined Security Weakness
Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters...
ScreenOS 1.732.x - Firewall Denial of Service
ScreenOS 1.732.x - Firewall Denial of Service source: https://www.securityfocus.com/bid/2176/info NetScreen Firewall is a network appliance used to secure against intruders and various types of attacks to a network. NetScreen has a Web administrative Interface WebUI used to configure and set the...