CVE-2002-0595

Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...

CVE-2002-0596

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...

CVE-2002-0596

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...

CVE-2002-0595

Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...

CVE-2002-0596

CVE-2002-0596 affects WebTrends Reporting Center 4.0d. A remote attacker can cause an error message to disclose the server’s real path by issuing a GET to get_od_toc.pl with an empty Profile parameter, resulting in information disclosure (pathname leakage). Root cause is an error message that rev...

CVE-2002-0595

The CVE-2002-0595 entry describes a buffer overflow in WebTrends Reporting Center 4.0d, specifically in WTRS_UI.EXE (WTX_REMOTE.DLL). The vulnerability can be triggered by a long HTTP GET request to the /reports/ directory, allowing remote execution of arbitrary code. Metrics indicate a Network-v...

Buffer overflow in WebTrends Reporting Center

No description provided...

WebTrends Reporting Center

NGSSoftware Insight Security Research Advisory Name: WebTrends Reporting Center 4.0d Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.webtrends.com Author: Mark Litchfield [email protected] Advisory URL:...

CVE-2001-0693

WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...

CVE-2001-0693

CVE-2001-0693 affects WebTrends HTTP Server 3.1c and 3.5, where a remote attacker can view script source by requesting a filename followed by an encoded space (%20). The underlying issue is an information disclosure vulnerability in the server’s handling of URL paths. The CVSS vector indicates ne...

CVE-2001-0693

WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of...

WebTrends Enterprise Reporting Server 3.1 c/3.5 - Source Code Disclosure

source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of arbitrary scripts on the WebTrends Live webserver. This is accomplished by...

CVE-1999-0916

The CVE-1999-0916 entry concerns WebTrends software that stores account names and passwords in a file with insufficient access restrictions. Connected PT-1999-1462 adds that the affected WebTrends versions are not specified and provides no fix information; it also describes the risk as exposure o...

CVE-1999-0916

WebTrends software stores account names and passwords in a file which does not have restricted access permissions...

WebTrends Enterprise Reporting Server 1.5 - Negative Content Length Denial of Service

WebTrends Enterprise Reporting Server 1.5 - Negative Content Length Denial of Service source: https://www.securityfocus.com/bid/569/info Specifying a negative content-length in a POST operation to the WebTrends Enterprise Reporting Server will crash the web server. !/usr/bin/perl -w Example DoS...

WebTrends Enterprise Reporting Server 1.5 - Negative Content Length Denial of Service

source: https://www.securityfocus.com/bid/569/info Specifying a negative content-length in a POST operation to the WebTrends Enterprise Reporting Server will crash the web server. !/usr/bin/perl -w Example DoS against WebTrends Enterprise Reporting Server 8/8/99 rpc use IO::Socket; die "usage: $0...

CVE-1999-0916

WebTrends software stores account names and passwords in a file which does not have restricted access permissions...

PT-1999-1462 · Webtrends · Webtrends

Name of the Vulnerable Software and Affected Versions: WebTrends affected versions not specified Description: The issue concerns the storage of account names and passwords in a file by the WebTrends software. This file does not have restricted access permissions, which could lead to unauthorized...