CVE-2007-5067

CVE-2007-5067 affects iMatix Xitami Web Server 2.5c2. Multiple buffer overflows allow remote attackers to execute arbitrary code by sending a long If-Modified-Since header to xigui32.exe or to xitami.exe. Reported in multiple sources (e.g., NVD, OpenVAS, PRION, Exploit-DB, MSF) with base CVSS 2.0...

CVE-2001-0391

CVE-2001-0391 affects Xitami Web Server (version 2.5d4 and earlier). The vulnerability permits remote attackers to crash the server by sending an HTTP request to the /aux directory, producing availability impact as described in the CVSS metrics (base score 5.0, MEDIUM). The provided documents do ...

CVE-2002-1942

Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...

CVE-2000-1225

CVE-2000-1225 affects Xitami 2.5b where the installer places testcgi.exe by default in the cgi-bin. Accessing this program can disclose sensitive web server configuration information to remote attackers. The accompanying metrics indicate a network-exposed, low-complexity vector with partial confi...

CVE-2008-6519

Xitami Web Server vulnerability CVE-2008-6519 affects Xitami 2.2a–2.5c2 (and possibly other versions). It is a format-string issue in Long Running Web Process (LRWP) requests that triggers incorrect logging code in the SMT kernel via the sendfmt function, allowing remote denial of service (daemon...

CVE-2008-6520

Xitami Web Server vulnerability CVE-2008-6520 affects the SSI filter in Xitami (notably version 2.5c2; other versions possibly affected). The issue consists of multiple format-string vulnerabilities that can be triggered by a URI ending in .ssi, .shtm, or .shtml, leading to denial of service (dae...

CVE-2002-1965

CVE-2002-1965 affects Imatix Xitami 2.5b4 and 2.5b5 due to a Cross-site scripting (XSS) flaw in Errors.gsl. The vulnerability allows remote attackers to inject arbitrary script/HTML via (1) Javascript events in an IMG SRC tag (onerror demonstrated) or (2) the User-Agent header in a GET request. A...