Vulnerabilidades

Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.

Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.

Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.

Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.

Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

The Zeus web server administrative interface uses weak encryption for its passwords.

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.

Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.

FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.

The Java Web Server would allow remote users to obtain the source code for CGI programs.

Information from SSL-encrypted sessions via PKCS #1.

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.

The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.

Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.