CVE-2000-0240

CVE-2000-0240 affects vqSoft vqServer. Multiple sources (NVD, CVE list, OPENVAS/Nessus, PT-2000-1222) describe a directory traversal style flaw where an attacker can read arbitrary files by using a URL containing a "/........../" segment, a variation of a ". ." (dot-dot) path traversal. Affected ...

CVE-2000-0240

vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. dot dot attack...

vqserver.dos.txt

DHC Advisory Advisory for vqServer 1.4.49 vqServer is made by vqSoft. Site: http://www.vqsoft.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] /-|=explaination=|-\ When sending vqServer version 1.4.49 a malformed URL request it will crash the service. This has been...

D.o.S Vulnerability in vqServer

DHC Advisory Advisory for vqServer 1.4.49 vqServer is made by vqSoft. Site: http://www.vqsoft.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] /-|=explaination=|- When sending vqServer version 1.4.49 a malformed URL request it will crash the service. This has been verifi...

DoS против vqServer

Переполнение буфера при длинном HTTP-GET запросе...

Дырка в vqserver

используя обратный путь в директориях .. можно получить любой файл с сервера, включая файл конфигурации, содержащий пароль администратора...

vqSoft vqServer 1.4.49 - Denial of Service

vqSoft vqServer 1.4.49 - Denial of Service source: https://www.securityfocus.com/bid/1610/info vqServer 1.4.49 is subject to a buffer overflow. If a GET request is sent to the server containing 65 000 characters the server will stop responding. A reboot is required in order to gain normal...

vqSoft vqServer 1.4.49 - Denial of Service

source: https://www.securityfocus.com/bid/1610/info vqServer 1.4.49 is subject to a buffer overflow. If a GET request is sent to the server containing 65 000 characters the server will stop responding. A reboot is required in order to gain normal functionality. !/usr/bin/perl DoS exploit for...

CVE-2000-0241

The CVE-2000-0241 entry concerns vqSoft vqServer, where passwords and other sensitive data are stored in cleartext in the server.cfg file. This exposed data can let an attacker gain privileges if they can read the configuration file. The available connected documentation confirms the issue, but d...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

vqserver /........../

Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

CVE-2000-0240

vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. dot dot attack...

vqsoft vqserver for windows 1.9.9 - Directory Traversal

source: https://www.securityfocus.com/bid/1067/info Some versions of vqSoft vqServer for Windows are vulnerable to the common ../../ method of retrieving known files from outside of the web directory structure, accomplished by appending a variable number of "../" and a known filename to an HTTP G...

PT-2000-1222 · Vqsoft · Vqserver

Name of the Vulnerable Software and Affected Versions: vqSoft vqServer affected versions not specified Description: The issue allows remote attackers to read arbitrary files via a "/........../" in the URL, which is a variation of a ".." dot dot attack. Recommendations: At the moment, there is no...

vqsoft vqserver for windows 1.9.9 - Directory Traversal

vqsoft vqserver for windows 1.9.9 - Directory Traversal source: https://www.securityfocus.com/bid/1067/info Some versions of vqSoft vqServer for Windows are vulnerable to the common ../../ method of retrieving known files from outside of the web directory structure, accomplished by appending a...