IIL Advisory: Vulnerabilities in acWEB HTTP server

Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: Vulnerabilities in acWEB HTTP server Advisory number: 13 Application: acWEB HTTP server Author e-mail: [email protected] Homepage: somewhere on sourceforge Date:...

badexploit.txt

!/usr/bin/perl - ElectronicSouls Private Do Not Distrobute - Remote Exploit For BadBlue 1.5 Web Server www.badblue.com A transversal bug has been discovered in BadBlue HTTP Daemon SoftWare. This is a gay bug, yes I know. But it can be kinda funny for those days you are bored = Vulnerable System:...

Phusion WebServer 1.0 - Directory Traversal (1)

source: https://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using triple-dot-slash .../ sequences...

CVE-2001-0876

Buffer overflow in Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL...

WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS

WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5 on Windows 95 / 98 / SE / ME is vulnerable to a directory traversal, all versions of windows are likely to be vulnerable to the buffer overflow / DoS DESCRIPTION 1 Directory...

Netscape SmartDownload 1.3 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function that will overflow when a user visits or is redirected...

CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...

HyperTerminal Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HyperTerminal Buffer Overflow Vulnerability USSR Advisory Code: USSR-2000055 Public Disclosure Date: October 18, 2000 Vendors Affected: Microsoft Corporation http://www.microsoft.com Hilgraeve, Inc. http://www.hilgraeve.com Systems Affected:...

CVE-2000-0347

Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name...

[SPSadvisory#39]Adobe Acrobat Series PDF File Buffer Overflow

SPS Advisory 39 Adobe Acrobat Series PDF File Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://shadowpenguin.backsection.net ------------------------------------------------------------- Date July 26, 2000 vulnerable Acrobat Reader 3.0J for Windows95/98/NT/2000...

alibaba.txt

Application: Alibaba 2.0 Problem Type: Multiple Problems3 Author: Prizm Platforms: Windows 95/98/NT Vendor Status: Not Informed Vendor Website: http://csm.alcyonis.fr Product Description ------------------- Alibaba is a fully functional http server for windows 95/98/NT. It supports cgi among many...

CVE-2000-0612

Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table...

MICROSOFT SECURITY FLAW?

Saturday, May 13, 2000 MICROSOFT SECURITY FLAW? Silent delivery and installation of an executable on a target computer. No client input other than opening an email or newsgroup post. 1. Using the following this can be accomplished with the default installation of Windows 95 and 98 and Internet...

silent.delivery.txt

Saturday, May 13, 2000 MICROSOFT SECURITY FLAW? Silent delivery and installation of an executable on a target computer. No client input other than opening an email or newsgroup post. 1. Using the following this can be accomplished with the default installation of Windows 95 and 98 and Internet...

officescan.txt

hi, All of u have certainly seen the possibly general dos attack against OfficeScan just by connecting a client to the port 12345 without sending any TCP FIN packet at the application time-out. After several tests on OfficeScan 3.5, I realized there were numerous other security flaws resulting in...

Microsoft Windows 98a/98b/98SE / Solaris 2.6 - IRDP

source: https://www.securityfocus.com/bid/578/info This discussion is verbatim from the LHI Advisory referenced in the "Reference Section" of this vulnerability entry with very few changes The ICMP Router Discovery Protocol IRDP comes enabled by default on DHCP clients that are running Microsoft...

FreeBSD 2.x HP-UX 91011 Kernel 2.0.3 Windows NT 4.0Server 2003 NetBSD 1 - land.c loopback Denial of Service (4)

FreeBSD 2.x HP-UX 91011 Kernel 2.0.3 Windows NT 4.0Server 2003 NetBSD 1 - land.c loopback Denial of Service 4 / source: https://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a "loopback" condition initiated by sending a TCP SYN packet with the source address and...

Security Update for Microsoft .NET Framework 4.6 on Windows 8 and Windows Server 2012 x64 (KB3097999)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2972215)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 x64 (KB2978125)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...