Webserver 4D weak encryption

Passwords are stored in cleartext...

ghttpd 1.4.x - 'Log()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/5960/info A buffer overflow has been reported in ghttpd which will allow arbitrary code to be executed with the privileges of the webserver. The overflow occurs when the argument to a 'GET' request is of excessive length. It is a stack-based overflow...

phpMyNewsletter 0.6.10 - Remote File Inclusion

source: https://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow an attacker to execute arbitrary commands with...

idefense.dinoweb.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 09.23.2002 Directory Traversal in Dino's WebServer DESCRIPTION A vulnerability exists in the latest version of Dino’s Webserver that can allow an attacker to view and retrieve any file on the system. The Common Vulnerabiliti...

Savant 3.1 multiple vulnerabilities

Auriemma Luigi, PivX security advisory Application: Savant webserver http://savant.sourceforge.net Version: 3.1 and possibly previous versions Bug: Buffer overflow in cgitest, crash with negative Content-Length and bad chars usage Risk medium: Remote DoS and authorization bypassing the risk is...

advisory

----------- UkR security team advisory ------------ Dino's WebServer 1.2 directory traversal bug ----------------------------------------------------- Name: Dino's WebServer 1.2 directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: Dino's...

advisory

----------- UkR security team advisory ------------ WebServer 4 Everyone directory traversal bug ----------------------------------------------------- Name: WebServer 4 Everyone directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: WebServer 4...

Super Site Searcher - Remote Command Execution

Super Site Searcher - Remote Command Execution source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The...

Super Site Searcher - Remote Command Execution

source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The parameters are then used in a function which passes...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error page...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. As a result, when an innocent user follows such a link,...

Abyss 1.0.3 directory traversal and administration bugs

Auriemma Luigi, PivX security advisory Application: Abyss webserver http://www.aprelium.com Version: 1.0.3 patch 2 and previous, both Windows and Linux, patch 2 fix the administration bug Bug: Directory traversal and administration bugs Risk high: An attacker can view every file in the remote...

Apache Tomcat 4.1 Cross-Site Scripting Vulnerability

This writing is part of Malloc Hackers & Malloc Security http://www.malloc.tk http://www.superw00t.com Title: Apache Tomcat 4.1 Cross-Site Scripting Vulnerability Author: Skinnay of Malloc Contact: "Skinnay" - [email protected] No modification of the contents of this file should be made without...

Apache 2.0.39 directory traversal and path disclosure bug

Auriemma Luigi, PivX security advisory AL001 Application: Apache WebServer http://httpd.apache.org Version: 2.0.39 and previous 2.0.x, ONLY on systems that supports backslash path delimiters Win/Netware/OS2 etc... Bug: Directory traversal vulnerability and path disclosure Risk high: An attacker c...

Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks

Date: August 3, 2002 Author: Stan Bubrouski Product: 602Pro LAN SUITE 2002 Version: 2002 Vendor: Software602, Inc. Summary: Denial of Service attacks in webserver and telnet proxy Description: There are two denial of service attacks in 602Pro LAN SUITE 2002 for windows. The problems are described...

Inso DynaWeb HTTPd 3.1/4.0.2/4.1 - Format String

// source: https://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to a remotely exploitable format-string...

Dispair 0.1/0.2 - Remote Command Execution

source: https://www.securityfocus.com/bid/5392/info Dispair fails to sufficiently validate user-supplied input before it is passed to the shell via the Perl open function. Remote attackers may potentially exploit this issue to execute arbitrary commands on the underlying shell with the privileges...

MM 1.0.x1.1.x - Shared Memory Library Temporary File Privilege Escalation

MM 1.0.x1.1.x - Shared Memory Library Temporary File Privilege Escalation // source: https://www.securityfocus.com/bid/5352/info The MM Shared Memory library is reported to be prone to a race condition with regards to temporary files which may enable a local attacker to gain elevated privileges...

MM 1.0.x/1.1.x - Shared Memory Library Temporary File Privilege Escalation

// source: https://www.securityfocus.com/bid/5352/info The MM Shared Memory library is reported to be prone to a race condition with regards to temporary files which may enable a local attacker to gain elevated privileges. This issue may reportedly be exploited by an attacker with shell access as...

KPMG-2002034: Jigsaw Webserver DOS device DoS

-------------------------------------------------------------------- Title: Jigsaw Webserver DOS device DoS BUG-ID: 2002034 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can tie up working threads on the web server...