110 matches found
Xerver HTTP Response Splitting
The version of Xerver running on the remote host has an HTTP response splitting vulnerability due to its failure to sanitize specially encoded carriage return and newline characters. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in th...
Xerver管理界面currentPath参数跨站脚本和目录遍历漏洞
BUGTRAQ ID: 36457 CVE ID: CVE-2009-3562,CVE-2009-3561 Xerver是一个免费的包括Web与FTP的服务器。 当action设置为chooseDirectory时，Xerver HTTP服务器中运行在32123端口上的管理接口没有正确地验证用户提交的currentPath参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本或目录遍历攻击。 Xerver 4.32 厂商补丁： Xerver ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Xerver服务器HTTP请求源码泄露漏洞
CVE ID: CVE-2009-3544 Xerver是一个免费的包括Web与FTP的服务器。 远程攻击者可以通过向Xerver HTTP服务器提交文件名前附加了::$DATA的特制HTTP请求泄露所请求文件的内容。 Xerver 4.32 厂商补丁： Xerver ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.javascript.nu/xerver/ http://172.16.2.101/index.html::$DATA http://172.16.2.101/default.asp::$DA...
Xerver <= 4.32 HTTP Response Splitting Vulnerability
Xerver is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Xerver HTTP Response Splitting Vulnerability
Xerver is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client...
Xerver 4.31, 4.32 HTTP Response Splitting
Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 Vendor Notified: 10-07-09 Vendor Response: NONE Published: 11-18-09 Proof of Concept:...
Xerver 4.31/4.32 - HTTP Response Splitting
Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE Published: 11-18-09 Proof of Concept:...
Xerver 4.314.32 - HTTP Response Splitting
Xerver 4.314.32 - HTTP Response Splitting Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NON...
Xerver 4.31, 4.32 HTTP Response Splitting
Exploit for unknown platform in category web applications ========================================= Xerver 4.31, 4.32 HTTP Response Splitting ========================================= Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor...
Xerver 4.31 4.32 HTTP Response Splitting
No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...
Xerver HTTP Server Directory Traversal Vulnerability
This host is running Xerver HTTP Server and is prone to the Directory Traversal Vulnerability OpenVAS Vulnerability Test $Id: gbxerverhttpserverdirtraversalvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ Xerver HTTP Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c...
Xerver Detection (HTTP)
HTTP based detection of Xerver. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/o...
Xerver HTTP Server Source Code Disclosure Vulnerability
This host is running Xerver HTTP Server and is prone to the Source Code Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbxerverhttpservercodedisclosurevuln.nasl 4970 2017-01-09 15:00:59Z teissa $ Xerver HTTP Server Source Code Disclosure Vulnerability Authors: Antu Sanadi Copyright:...
Xerver HTTP Server <= 4.32 Directory Traversal Vulnerability
Xerver HTTP Server is prone to a directory traversal vulnerability Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Xerver Version Detection
This script finds the running Xerver Version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbxerverhttpserverdetect.nasl 5499 2017-03-06 13:06:09Z teissa $ Xerver Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Thi...
Xerver HTTP Server Cross Site Scripting Vulnerability
This host is running Xerver HTTP Server and is prone to Cross Site Scripting vulnerability OpenVAS Vulnerability Test $Id: gbxerverhttpserverxssvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ Xerver HTTP Server Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...
Xerver HTTP Server <= 4.32 Information Disclosure Vulnerability
Xerver HTTP Server is prone to a source code disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Design/Logic Flaw
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...
CVE-2009-3561
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...