FloosieTek FTGate 2.1 - Web File Access

source: https://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web brows...

CVE-1999-0412

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension...

Apache 1.2.51.3.1 UnityMail 2.0 - MIME Header Denial of Service

Apache 1.2.51.3.1 UnityMail 2.0 - MIME Header Denial of Service source: https://www.securityfocus.com/bid/1760/info Apache Web Server and MessageMedia UnityMail are susceptible to a denial of service attack if a significant amount of 8000 byte MIME headers are sent. Both will crash and restart of...

Info2www 1.0/1.1 - CGI Input Handling

source: https://www.securityfocus.com/bid/1995/info The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes. This script fails to properly parse input and can be used to execute commands on the server with permissions of the web server, by passing commands as part of ...

NCSA httpd-campas 1.2 - sample script

NCSA httpd-campas 1.2 - sample script source: https://www.securityfocus.com/bid/1975/info Campas is a sample CGI script shipped with some older versions of NCSA HTTPd, an obsolete web server package. The versions that included the script could not be determined as the server is no longer...

NCSA HTTPd 1.x - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/3158/info NCSA HTTPd is a free, open-source web server for nix systems. NCSA HTTPd versions 1.3 and earlier are prone to an exploitable buffer overflowin the username field which will allow malicious remote users to execute arbitrary code with the...

OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow

OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow source: https://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root...

OReilly WebSite 1.x/2.0 - 'win-c-sample.exe' Buffer Overflow

source: https://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root directory. This program is vulnerable to a buffer overflow...

CVE-1999-0175

The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server...

Microsoft IIS 1.0 Netscape Server 1.01.12 OReilly WebSite Professional 1.1b - .cmd .CMD Remote Command Execution

Microsoft IIS 1.0 Netscape Server 1.01.12 OReilly WebSite Professional 1.1b - .cmd .CMD Remote Command Execution IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source:...

NCSA HTTPd 1.x - Remote Buffer Overflow (2)

NCSA HTTPd 1.x - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/3158/info NCSA HTTPd is a free, open-source web server for nix systems. NCSA HTTPd versions 1.3 and earlier are prone to an exploitable buffer overflowin the username field which will allow malicious remote use...