EUVD-2000-0638

Malware in sbrugna...

EUVD-2000-0639

Malware in sbrugna...

WEBactive HTTP Server 1.0 Directory Traversal

Introduction: ITAfrica's WEBactive HTTP Server 1.00 is an HTTP/1.00-compliant World Wide Web server daemon for Windows 95 or Windows NT, specifically designed for the SOHO Small Office/Home environment. It will operate on any TCP/IP connection to the Internet, whether via temporary dial- up or...

CVE-2000-0642

The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page...

CVE-2000-0643

Technical details for CVE-2000-0643 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates from official advisories and vendor advisories.

CVE-2000-0643

Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0642

The WebActive HTTP Server 1.00 stores the web access log active.log in the document root, allowing remote viewing via direct requests and enabling information disclosure about site visitors. This relies on the default configuration. Remediation guidance from the connected data includes using a di...

WebActive HTTP Server active.log Remote Information Disclosure

It is possible to obtain the remote WebActive logfile by requesting the file /active.log An attacker may use this to obtain valuable information about your site, such as who visits it and how popular it is. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

webactive.txt

Application: ITAfrica's WEBactive version 1.00 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/NT Vendor Status: Not Informed, Project discontinuedI think Download URL: ftp://ftp.mira.net/mirrors/winsock-l/Windows95/Daemons/HTTPD/activ100.zip Product...

CVE-2000-0643

Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0642

The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page...