CVE-2003-0832

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

CVE-2003-0833

Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname...

CVE-2003-0833

CVE-2003-0833 affects the webfs web server (pre-1.20). The issue is a stack-based buffer overflow triggered by creating directories that result in a long pathname, allowing arbitrary code execution. Debian’s DSA-392-1 notes an update to webfs to fix this. OpenVAS/OSV entries corroborate the same ...

CVE-2003-0832

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

CVE-2003-0833: Undefined Security Weakness

Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname...

CVE-2003-0832: Undefined Security Weakness

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

Multiple webfs bugs

Directory traversal, buffer overflows...

[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...

WebFS 1.x - Pathname Buffer Overrun

WebFS 1.x - Pathname Buffer Overrun // source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...

DSA-392 webfs - buffer overflows, file and directory exposure

Bulletin has no description...

WebFS 1.x - 'Pathname' Buffer Overrun

// source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting sensitive memory with malicious dat...

CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

DEBIAN-CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

CVE-2003-0445

CVE-2003-0445 describes a buffer overflow in the webfs HTTP server (pre-1.17.1). The affected product is webfs, a lightweight HTTP server for static content. The underlying issue is a buffer overflow triggered by a long HTTP Request-URI, which could allow a remote attacker to execute arbitrary co...

CVE-2003-0445: Undefined Security Weakness

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

[SECURITY] [DSA-328-1] New webfs packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 328-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2003 http://www.debian.org/security/faq -...