Perception LiteServe MS-DOS filename vulnerability

Perception LiteServe http://www.cmfperception.com/liteserve.html is a Web, FTP and e-Mail server for Win. When GET requests are made to LiteServe's webserver with the name of the cgi-bin directory as a MS-DOS directory name eg. cgi-shizznitch=CGI-SH1 and cgi-bin=CGI-BIN, LiteServe will read the...

1C: Arcadia Internet Store 1.0 - Path Disclosure

1C: Arcadia Internet Store 1.0 - Path Disclosure source: https://www.securityfocus.com/bid/2904/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the...

Acme.Serve 1.7 - Arbitrary File Access

Acme.Serve 1.7 - Arbitrary File Access source: https://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a...

Acme.Serve 1.7 - Arbitrary File Access

source: https://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a webserver that listens on port 9090. This...

Faust Informatics FreeStyle Chat 4.1 SR2 MS-DOS Device Name - Denial of Service

Faust Informatics FreeStyle Chat 4.1 SR2 MS-DOS Device Name - Denial of Service source: https://www.securityfocus.com/bid/2777/info A problem with the chat server makes it possible to deny service to legitmate users. By submitting a request to the webserver including the 'AUX' MS-DOS device name,...

IPC@Chip Security

Sentry Research Labs www.sentry-labs.de.vu product: IPC@Chip Beck GmbH vendor informed: 21th of May status: unanswered Note: The demonstration tool and a german version there is also an english download version of this report is available form our website. Siberian...

CVE-2001-0385

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2001-0749

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-0385

GoAhead WebServer is affected by DoS vulnerabilities in multiple paths. CVE-2001-0385 covers GoAhead WebServer 2.1 where a crafted HTTP request to the /aux directory can crash the daemon. Red Hat CVE-2003-1569 extends this on Windows 95/98/ME, showing that GoAhead WebServer before 2.1.5 can be fo...

Beck IPC GmbH IPC@CHIP - TelnetD Login Account Brute Force

Beck IPC GmbH IPC@CHIP - TelnetD Login Account Brute Force source: https://www.securityfocus.com/bid/2771/info The IPC@Chip is a single-chip embedded webserver from Beck GmbH. The device's inbuilt telnetd service may allow a remote user to repeatedly attempt to login to a given account, without...

CVE-2001-0385: Undefined Security Weakness

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory...

CVE-2001-1337

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (2)

iPlanet 4.1 Web Publisher - Remote Buffer Overflow 2 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...

Advisory for Jana server

Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...

Advisory for MP3Mystic

Advisory for MP3Mystic MP3Mystic is made by mp3mystic.com Site: http://www.mp3mystic.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0117 /-|=explanation=|- MP3Mystic is a webserver that lets a visitor browse your harddrive only showing MP3 files. It is vulnerable to...

T. Hauck Jana Server 1.45/1.46 - Hex Encoded Directory Traversal

source: https://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In addition to revealing directories, this...

Drummond Miles A1Stats 1.0 - a1disp4.cgi Traversal Arbitrary File Read

Drummond Miles A1Stats 1.0 - a1disp4.cgi Traversal Arbitrary File Read source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as...

Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW)

Summary - New Tektronix Xerox printers have covered up a security through obscurity flaw discovered in November, 1999 with more security through obscurity. The unauthenticated and unfiltered administrator configuration page on the PhaserLink webserver is now located at the URL...

Advisory for Viking

Advisory for Viking Viking is made by Robtex. Site: http://www.robtex.com/viking by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0107 /-|=explanation=|- Viking is a webserver. It has a simple hex encoded dot dot bug. /-|=who is vulnerable=|- Tested to be vulnerable: Viki...

Advisory for Xitami 2.4d7, 2.5d4

Advisory for Xitami 2.4d7, 2.5d4 Xitami is made by Imatix. Site: http://xitami.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0105 /-|=explanation=|- Xitami is a webserver. It has a denial of service. /-|=who is vulnerable=|- Anyone running Xitami 2.5d4, 2.4d7 and...