CVE-2005-0684

Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via 1 an HTTP GET request with a long file parameter after a percent "%" sign or 2 a long Lock-Token string to the WebDAV functionality, which is not properly handled by th...

CVE-2005-0082

The CVE-2005-0082 issue affects MySQL MaxDB 7.5.0.0 and earlier releases up to 7.5.0.20/21, where the sapdbwa_GetUserData function can be abused by remote attackers to crash the SAP DB Web Agent via a null dereference in the WebDAV handler. Red Hat confirms the fixed version is 7.5.0.21, with upd...

CVE-2005-0082

The sapdbwaGetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service crash via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash...

CVE-2004-2577

The aclcheck function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts...

CVE-2004-1168

CVE-2004-1168 affects MaxDB WebTools before/including 7.5.00.18. The WebDav handler is vulnerable to a stack-based buffer overflow, enabling remote code execution when a long Overwrite header is processed. No exploit specifics or mitigation details are provided in the supplied documents. This ent...

CVE-2004-1168

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header...

CVE-2003-0718

The WebDAV Message Handler for Internet Information Services IIS 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service memory and CPU exhaustion, application crash via a PROPFIND request with an XML message containing XML elements with a large number of attributes...

MS Windows IIS WebDAV XML Denial of Service Exploit (MS04-030)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows IIS WebDAV XML Denial of Service Exploit MS04-030 ============================================================== !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found ...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

Microsoft IIS - WebDAV XML Denial of Service MS04-030 !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort =...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

!/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort = $port,Proto = "TCP"; for $count=1;...

CVE-2003-0718

CVE-2003-0718 concerns a denial-of-service in the WebDAV XML Message Handler of Microsoft IIS. A crafted PROPFIND request containing a WebDAV XML document with a very large number of attributes can cause IIS to exhaust memory and CPU, potentially rendering the server unresponsive. The vulnerabili...

CVE-2003-0718

The WebDAV Message Handler for Internet Information Services IIS 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service memory and CPU exhaustion, application crash via a PROPFIND request with an XML message containing XML elements with a large number of attributes...

Microsoft WebDAV XML DoS

Large number of attributes in requests causes resource exhaustion...

Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS

//////////////////////////////////////////////////////////////////// //==================== Security Advisory =====================// //////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- ----- IIS 5.x/6.0 WebDAV...

Microsoft Security Bulletin MS04-030 Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service (824151)

Microsoft Security Bulletin MS04-030 Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service 824151 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Denial of Service Maximum Severity...

Microsoft XML Parser Remote Denial of Service Vulnerability

Description Microsoft XML Parser is prone to a remote denial of service vulnerability when handling malformed requests. The vulnerability can be exploited through the WebDAV XML message handler of Microsoft IIS server. It is reported that this issue requires a remote attacker to create specially...

MS04-030: WebDAV XML Message Handler Denial of Service (824151)

The remote host is running a version of Windows and IIS that is vulnerable to a remote denial of service attack through the WebDAV XML Message Handler. An attacker may exploit this flaw to prevent the remote web server from working properly. C Tenable Network Security, Inc. include"compat.inc"; i...

Debian DSA-507-1 : cadaver - buffer overflow

Stefan Esser discovered a problem in neon, an HTTP and WebDAV client library, which is also present in cadaver, a command-line client for WebDAV server. User input is copied into variables not large enough for all cases. This can lead to an overflow of a static heap variable. %NASLMINLEVEL 70300 ...

FreeBSD : subversion -- WebDAV fails to protect metadata (188)

The following package needs to be updated: subversion-perl %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg184f5d0b0fe811d98a8a000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrig...

CVE-2004-0809

The moddav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service child process crash via a certain sequence of LOCK requests for a location that allows WebDAV authoring access...