Unchecked Buffer in ntdll.dll (Q815021)

The remote host is vulnerable to a flaw in ntdll.dll which may allow an attacker to gain system privileges, by exploiting it through, for instance, WebDAV in IIS5.0 other services could be exploited, locally and/or remotely SPDX-FileCopyrightText: 2003 Trevor Hemsley Some text descriptions might ...

Microsoft IIS 5.0 WebDav Memory Leakage Vulnerability - Active Check

The WebDav extensions httpext.dll for Internet Information Server 5.0 contains a flaw that may allow a malicious user to consume all available memory on the target server by sending many requests using the LOCK method associated to a non existing filename. This concern not only IIS but the entire...

Microsoft IIS 5.1 source code leak

Special WebDAv request to script located at FAT volume allows to retrieve source code...

IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV

It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...

IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV

It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...

Microsoft IIS 5.1 - WebDAV HTTP Request Source Code Disclosure

Microsoft IIS 5.1 - WebDAV HTTP Request Source Code Disclosure source: https://www.securityfocus.com/bid/14764/info Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability. A successful attack causes the Web server to present the requested file as a plain text file...

CVE-2005-1989

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability"...

CVE-2005-1989

CVE-2005-1989 is part of a set of Internet Explorer flaws affecting IE 5.0/5.5/6.0 via Web Folder Behaviors Cross‑Domain Vulnerability (CAN-2005-1989) and related issues (CAN-2005-1988 JPEG Rendering; CAN-2005-1990 COM Object Instantiation). The connected records confirm a cross‑domain informatio...

CVE-2005-1989

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability"...

CVE-2005-1989: Undefined Security Weakness

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability"...

Oracle Forms 6i/9i/4.5.10/5.0/6.0.8/10g Services - Unauthorized Form Execution

source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which the server is executing. It shoul...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...

CVE-2005-1207

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

CVE-2005-1207: Undefined Security Weakness

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

CVE-2005-1207

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

Microsoft Windows Web Client Service Remote Code Execution Vulnerability

Description Microsoft Windows Web Client Service is affected by a remote code execution vulnerability. This is due to a buffer overflow in the affected component. A remote authenticated attacker can exploit this issue by sending a malformed message to the Web Client Service. This can lead to...

PT-2005-2742 · Linux +1 · Davfs2 +1

Name of the Vulnerable Software and Affected Versions: davfs2 version 0.2.3 Description: The issue is related to the improper enforcement of Unix permissions in the WEB-DAV Linux File System davfs2, allowing local users to write arbitrary files on a davfs2 mounted filesystem. Recommendations: For...

CVE-2005-1274

CVE-2005-1274 affects MySQL MaxDB prior to 7.5.00.26. A stack-based buffer overflow occurs in the WebDAV getIfHeader function, exploitable through an HTTP unlock request with a long If parameter. This can allow remote attackers to execute arbitrary code. The vulnerability is documented across mul...

CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...

CVE-2005-1274

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...