3442 matches found
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...
CVE-2004-2478
The CVE-2004-2478 entry concerns Jetty HTTP Server in affected products (IBM Trading Partner Interchange < 4.2.4; CA Unicenter Web Services Distributed Management
CVE-2004-2478
Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2005-2224
aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...
CVE-2005-2224
aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...
CVE-2004-1755
The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges...
CVE-2004-1755
Technical details for CVE-2004-1755 are not publicly available in the provided documents. No affected products, impact specifics, or remediation are described here. Monitor for updates.
CVE-2004-1755
The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges...
CVE-2004-2478
Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...
MyServer 0.4.2 - Malformed URI Denial of Service
MyServer 0.4.2 - Malformed URI Denial of Service source: https://www.securityfocus.com/bid/8120/info MyServer has been reported to be prone to denial of service attacks when handling certain malformed URIs. This could be exploited to deny availability of web services to legitimate users. This iss...
MyServer 0.4.2 - Malformed URI Denial of Service
source: https://www.securityfocus.com/bid/8120/info MyServer has been reported to be prone to denial of service attacks when handling certain malformed URIs. This could be exploited to deny availability of web services to legitimate users. This issue was reported in myServer 0.4.2 on Microsoft...
Web Server UDDI Detection
The remote web server supports Universal Description, Discovery, and Integration UDDI requests, which are a standard way for businesses to publish service listings. Copyright by John [email protected] See the Nessus Scripts License for details include"compat.inc"; ifdescription...
Microsoft Windows 2000 Internet Information Server (IIS) and Exchange 2000 vulnerable to DoS via malformed URL (MS01-014)
Overview A vulnerability that affects Microsoft IIS 5.0 and Exchange 2000 allows an intruder to disrupt IIS web services and web-based mail services served via an Exchange server. Description Microsoft IIS 5.0 contains a vulnerability that allows an intruder to cause a memory allocation error by...
def-2001-13: NTMail Web Services DoS
====================================================================== Defcom Labs Advisory def-2001-13 NTMail Web Services DoS Author: Peter Grьndl [email protected] Release Date: 2001-03-20 ====================================================================== ------------------------=Bri...
ColdFusion Denial of Service vulnerability in sample script
Subject: ColdFusion Denial of Service vulnerability in sample script Software: ColdFusion Server Professional 4.5.1 Eval for Windows SP2 Risk Level: Medium Author: Niels Heinen Vendor Status: The vendor has released a document concerning this problem Exploitable: Remotely Impact of the...
VIGILANTE-2000012.txt
Mdaemon Web Services Heap Overflow DoS Advisory Code: VIGILANTE-2000012 Release Date: September 18, 2000 Systems Affected: - Mdaemon 3.1.1 for Windows NT It is likely that older versions are also affected. THE PROBLEM We want to start off by pointing out that this is not the same problem as was...
Security update 1970-01-01
...
Bing Bar WE2 4-5
...
Security Update For Exchange Server 2016 CU11 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Security Update For Exchange Server 2016 CU12 (KB4503027)
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...