5 matches found
CVE-2005-0338
Savant Web Server 3.1 is affected by a remote buffer overflow that allows an attacker to execute arbitrary code by sending a long HTTP request. This vulnerability is documented as CVE-2005-0338. Connected sources describe the issue as a buffer overrun in the server’s handling of user-supplied str...
CVE-2002-1828
Savant Webserver 3.1 is affected by a denial-of-service vulnerability triggered by sending an HTTP GET request with a negative Content-Length . The issue allows remote attackers to cause the server to crash. The available documents describe the vulnerable component as the Savant webserver (versio...
CVE-2002-2145
CVE-2002-2145 affects Savant Web Server 3.1 and earlier. The vulnerability allows remote attackers to bypass authentication for password-protected user folders by requesting a URL ending with a hex-encoded space (%20) followed by a dot (%2e). The connected Red Hat and CVE records document the sam...
CVE-2005-2859
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, enabling local privilege escalation. Affected component: Savant Web Server; root cause: plaintext credential storage leading to unauthorized access. CVSS2 shows LOCAL attack with low complexity; base impact i...
CVE-2002-2146
CVE-2002-2146 affects Savant Web Server prior to 3.2? (Savant Web Server 3.1 and earlier) through the CGI binary cgitest.exe . The issue is described as a buffer overflow in the CGI that can be triggered by a long HTTP request, leading to a denial of service via crash; some sources also indicate ...