TelCondex Simple Webserver Buffer Overflow

The TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Keene digital media server XSS

The remote host runs Keene digital media server, a webserver used to share digital information. This version is vulnerable to multiple cross-site scripting attacks which may allow an attacker to steal the cookies of users of this site. SPDX-FileCopyrightText: 2004 David Maciejak Some text...

Webserver 4D Cleartext Passwords

The remote host is running Webserver 4D 3.6 or lower. Version 3.6 of this service stores all usernames and passwords in cleartext. File: C:\Program Files\MDG\Web Server 4D 3.6.0\Ws4d.4DD SPDX-FileCopyrightText: 2002 Jason Lidow Some text descriptions might be excerpted from a referenced sources,...

Roxen counter module

The Roxen Challenger webserver is running and the counter module is installed. Requesting large counter GIFs eats up CPU-time on the server. If the server does not support threads this will prevent the server from serving other clients. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text...

Snoopy 0.9x/1.0/1.2 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/15213/info Snoopy is prone to a vulnerability that lets attackers execute arbitrary commands because the application fails to properly sanitize user-supplied input. This issue may facilitate unauthorized remote access to the application in the context of...

Snoopy 0.9x1.01.2 - Arbitrary Command Execution

Snoopy 0.9x1.01.2 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/15213/info Snoopy is prone to a vulnerability that lets attackers execute arbitrary commands because the application fails to properly sanitize user-supplied input. This issue may facilitate unauthorized...

Debian DSA-839-1 : apachetop - insecure temporary file

Eric Romang discovered an insecurely created temporary file in apachetop, a realtime monitoring tool for the Apache webserver that could be exploited with a symlink attack to overwrite arbitrary files with the user id that runs apachetop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 839-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

DSA-839-1 apachetop - insecure temporary file

Bulletin has no description...

[Full-disclosure] Sawmill XSS vuln

This has been delayed until the vendor had released a new version: SNIP Date: Fri, 26 Aug 2005 11:48:48 -0700 From: Greg Ferrar [email protected] User-Agent: Mozilla Thunderbird 1.0.2 Macintosh/20050317 X-Accept-Language: en-us, en To: [email protected] Cc: [email protected]...

2005.1.txt

ID : 2005.1 Product : Barracuda Spam Firewall Appliance Vendor : Barracuda networks Affected product : firmware Published date : 01/09/2005 Initial Vendor contact 2005-06-14 CVE : CVE-MAP-NOMATCH Solution : Install Firmware 3.1.18 Reference URL :...

W-Agora < 4.2.1 index.php site Parameter Traversal Arbitrary File Access

Binary data 3171.prm...

simplecam12.txt

Donato Ferrante Application: SimpleCam http://www.deadpirate.com/ Version: 1.2 Bug: directory traversal Date: 04-May-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...

CVE-2002-2095

Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using 1 index.webroot and 2 index.ipallow...

CVE-2002-2095: Undefined Security Weakness

Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using 1 index.webroot and 2 index.ipallow...

apache -- http request smuggling

A Watchfire whitepaper reports an vulnerability in the Apache webserver. The vulnerability can be exploited by malicious people causing cross site scripting, web cache poisoining, session hijacking and most importantly the ability to bypass web application firewall protection. Exploiting this...

KF Webserver protection bypass

By requesting resource like http://victimaddress/All20Disk20Drives/C:/ it's possible to access protected directory...

[NT] KF WebServer Directory Traversal Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

osCommerce 2.2 - update.php Information Disclosure

osCommerce 2.2 - update.php Information Disclosure source: https://www.securityfocus.com/bid/14294/info osCommerce is prone to an information-disclosure vulnerability. An attacker could exploit this vulnerability to display the contents of any file normally readable by the webserver process...