Alt-N WebAdmin 2.0.x - Remote File Viewing

source: https://www.securityfocus.com/bid/7438/info Alt-N WebAdmin allows a remote user to access files that they should not be able to access. The remote user can submit an HTTP request that will return the contents of any webserver-readable file on the system. NOTE: The user must have...

[NT] Directory Traversal bug in QuickFront Webserver

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

Twilight Utilities TW-WebServer buffer overflow

Buffer overflow on oversized GET request...

TW-WebServer 1.0 - Denial of Service (2)

TW-WebServer 1.0 - Denial of Service 2 // source: https://www.securityfocus.com/bid/7368/info It has been reported that TW-WebServer is prone to a denial of service vulnerability. Reportedly when an excessive quantity of data is sent to the TW-Webserver as part of a malicious HTTP GET request the...

TW-WebServer 1.0 - Denial of Service (2)

// source: https://www.securityfocus.com/bid/7368/info It has been reported that TW-WebServer is prone to a denial of service vulnerability. Reportedly when an excessive quantity of data is sent to the TW-Webserver as part of a malicious HTTP GET request the server will fail. Although unconfirmed...

TW-WebServer 1.0 - Denial of Service (1)

source: https://www.securityfocus.com/bid/7368/info It has been reported that TW-WebServer is prone to a denial of service vulnerability. Reportedly when an excessive quantity of data is sent to the TW-Webserver as part of a malicious HTTP GET request the server will fail. Although unconfirmed, d...

TW-WebServer 1.0 - Denial of Service (1)

TW-WebServer 1.0 - Denial of Service 1 source: https://www.securityfocus.com/bid/7368/info It has been reported that TW-WebServer is prone to a denial of service vulnerability. Reportedly when an excessive quantity of data is sent to the TW-Webserver as part of a malicious HTTP GET request the...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

HackTrack-2003-03-001.txt

=== HackTrack - Advisory ================ Adv. ID: 2003-03-001 == Advisory Information -------------------- Name : Directory Traversal bug in QuickFront webserver Vendor Homepage : http://www.quickfront.com Platforms : Windows Vulnerability Type : Directory Traversal Vendor Contacted : 11/03/2003...

Aprelium Abyss Webserver DoS

Incomplete Connection: and Range: headers cause server to crash...

Abyss X1 1.1.2 remote crash

Application: Abyss Webserver http://www.aprelium.com Versions: X1 v 1.1.2 Platform: Windows and Linux Bug: Crash caused by the reading of an unreacheable memory zone Risk: Remote crash Author: Auriemma Luigi e-mail: [email protected] web: http://www.pivx.com/luigi/ 1 Introduction 2 Bug 3 The Code 4...

abyss.txt

Application: Abyss Webserver http://www.aprelium.com Versions: X1 v 1.1.2 Platform: Windows and Linux Bug: Crash caused by the reading of an unreacheable memory zone Risk: Remote crash Author: Auriemma Luigi e-mail: [email protected] web: http://www.pivx.com/luigi/ 1 Introduction 2 Bug 3 The Code 4...

CVE-2002-1504

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

WebCart.pl

WebCart exploit Spawn bash style Shell with webserver uid Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 =...

ShopCart.pl

Shopcart exploit Spawn bash style Shell with webserver uid Spabam 2003 PRIV8 code hackarena irc.brasnet.org This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my @results; my $probe; my @U; my $shit; $U1 = "/cgi-local/shop.pl/page=;";...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

CVE-2002-1535

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

CVE-2002-1504

This CVE-2002-1504 entry pertains to WebServer 4 Everyone 1.22 and describes a directory traversal vulnerability where remote attackers can read arbitrary files through URL dot-dot backslash sequences ("..\"). The described root cause is improper normalization of path traversal in user-supplied U...

CVE-2002-1504

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

CVE-2002-1535

CVE-2002-1535 affects Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2. An attacker can discover internal host IP addresses by sending a CONNECT request and observing differing error messages depending on host presence, implying partial disclosure of internal topology. Th...