ID de Prueba:	1.3.6.1.4.1.25623.1.0.102004
Categoría:	Buffer overflow
Título:	www too long url
Resumen:	Remote web server is vulnerable to the too long URL vulnerability. It might be; possible to gain remote access using buffer overflow.
Descripción:	Summary: Remote web server is vulnerable to the too long URL vulnerability. It might be possible to gain remote access using buffer overflow. Solution: Upgrade vulnerable web server to latest version. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0002 BugTraq ID: 889 http://www.securityfocus.com/bid/889 Bugtraq: 19991223 Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT (Google Search) http://marc.info/?l=bugtraq&m=94598388530358&w=2 Bugtraq: 20000128 ZBServer 1.50-r1x exploit (WinNT) (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=36B0596E.8D111D66@teleline.es http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556 XForce ISS Database: zbserver-get-bo Common Vulnerability Exposure (CVE) ID: CVE-2000-0065 XForce ISS Database: inetserv-get-bo Common Vulnerability Exposure (CVE) ID: CVE-2000-0571 BugTraq ID: 1423 http://www.securityfocus.com/bid/1423 Bugtraq: 20000703 Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs@ussrback.com XForce ISS Database: localweb-get-bo(4896) https://exchange.xforce.ibmcloud.com/vulnerabilities/4896 Common Vulnerability Exposure (CVE) ID: CVE-2001-1250 BugTraq ID: 2979 http://www.securityfocus.com/bid/2979 Bugtraq: 20010629 4 New vulns. vWebServer and SmallHTTP (Google Search) http://online.securityfocus.com/archive/1/194418 http://www.iss.net/security_center/static/6771.php Common Vulnerability Exposure (CVE) ID: CVE-2003-0125 BugTraq ID: 7067 http://www.securityfocus.com/bid/7067 http://www.krusesecurity.dk/advisories/routefind550bof.txt XForce ISS Database: routefinder-vpn-options-bo(11514) https://exchange.xforce.ibmcloud.com/vulnerabilities/11514 Common Vulnerability Exposure (CVE) ID: CVE-2003-0833 Debian Security Information: DSA-392 (Google Search) http://www.debian.org/security/2003/dsa-392 Common Vulnerability Exposure (CVE) ID: CVE-2006-1652 BugTraq ID: 17378 http://www.securityfocus.com/bid/17378 Bugtraq: 20060404 Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (Google Search) http://www.securityfocus.com/archive/1/429930/100/0/threaded Bugtraq: 20060405 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (Google Search) http://www.securityfocus.com/archive/1/430287/100/0/threaded Bugtraq: 20060411 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer POC (Google Search) http://www.securityfocus.com/archive/1/430711/100/0/threaded https://www.exploit-db.com/exploits/1642 https://www.exploit-db.com/exploits/1643 http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html http://secunia.com/advisories/19513 http://securityreason.com/securityalert/674 http://www.vupen.com/english/advisories/2006/1240 XForce ISS Database: ultr@vnc-vnclogreallyprint-bo(25650) https://exchange.xforce.ibmcloud.com/vulnerabilities/25650 XForce ISS Database: untr@vnc-error-bo(25648) https://exchange.xforce.ibmcloud.com/vulnerabilities/25648 Common Vulnerability Exposure (CVE) ID: CVE-2004-2299 BugTraq ID: 10376 http://www.securityfocus.com/bid/10376 Bugtraq: 20040518 Overflow@OmniHTTPd (Google Search) http://www.securityfocus.com/archive/1/363651 http://www.osvdb.org/12944 XForce ISS Database: omnithttpd-range-header-bo(16190) https://exchange.xforce.ibmcloud.com/vulnerabilities/16190 Common Vulnerability Exposure (CVE) ID: CVE-2002-1003 BugTraq ID: 5184 http://www.securityfocus.com/bid/5184 Bugtraq: 20020708 Foundstone Advisory - Buffer Overflow in MyWebServer (fwd) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html http://www.iss.net/security_center/static/9501.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1012 BugTraq ID: 5233 http://www.securityfocus.com/bid/5233 Bugtraq: 20020715 Tivoli TMF ManagedNode Buffer Overflow (Google Search) http://online.securityfocus.com/archive/1/282283 http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html http://www.iss.net/security_center/static/9556.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1011 BugTraq ID: 5235 http://www.securityfocus.com/bid/5235 Bugtraq: 20020715 Tivoli TMF Endpoint Buffer Overflow (Google Search) http://online.securityfocus.com/archive/1/282292 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html http://www.iss.net/security_center/static/9555.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0836 Bugtraq: 20011018 def-2001-30 (Google Search) http://marc.info/?l=bugtraq&m=100342151132277&w=2 Bugtraq: 20011024 Oracle9iAS Web Cache Overflow Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=100395487007578&w=2 http://www.cert.org/advisories/CA-2001-29.html CERT/CC vulnerability note: VU#649979 http://www.kb.cert.org/vuls/id/649979 http://www.osvdb.org/5534 XForce ISS Database: oracle-appserver-http-bo(7306) https://exchange.xforce.ibmcloud.com/vulnerabilities/7306 Common Vulnerability Exposure (CVE) ID: CVE-2005-1173 Bugtraq: 20050418 ERNW Security Advisory 01/2005 (Google Search) http://marc.info/?l=bugtraq&m=111384806002021&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2002-1905 BugTraq ID: 5964 http://www.securityfocus.com/bid/5964 Bugtraq: 20021013 Security vulnerabilities in Polycom ViaVideo Web component (Google Search) http://online.securityfocus.com/archive/1/295146 http://www.iss.net/security_center/static/10359.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1212 BugTraq ID: 5967 http://www.securityfocus.com/bid/5967 http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true http://www.iss.net/security_center/static/10372.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1120 BugTraq ID: 5686 http://www.securityfocus.com/bid/5686 https://www.exploit-db.com/exploits/16770/ http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html http://www.iss.net/security_center/static/10076.php Common Vulnerability Exposure (CVE) ID: CVE-2000-0641 BugTraq ID: 1453 http://www.securityfocus.com/bid/1453 Bugtraq: 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html XForce ISS Database: savant-get-bo(4901) https://exchange.xforce.ibmcloud.com/vulnerabilities/4901 Common Vulnerability Exposure (CVE) ID: CVE-2002-1166 BugTraq ID: 5831 http://www.securityfocus.com/bid/5831 Bugtraq: 20020930 iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server (Google Search) http://marc.info/?l=bugtraq&m=103340145725050&w=2 http://www.osvdb.org/9836 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html http://www.iss.net/security_center/static/10223.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0123 BugTraq ID: 3874 http://www.securityfocus.com/bid/3874 Bugtraq: 20020114 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability (Google Search) http://online.securityfocus.com/archive/1/250242 http://www.iss.net/security_center/static/7879.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0820 BugTraq ID: 2879 http://www.securityfocus.com/bid/2879 BugTraq ID: 2965 http://www.securityfocus.com/bid/2965 Bugtraq: 20010617 Buffer Overflow in GazTek HTTP Daemon v1.4 (ghttpd) (Google Search) http://marc.info/?l=bugtraq&m=99279182704674&w=2 Bugtraq: 20010630 Advisory Ghttp 1.4 (Google Search) http://marc.info/?l=bugtraq&m=99406263214417&w=2 XForce ISS Database: gaztek-ghttpd-bo(6702) https://exchange.xforce.ibmcloud.com/vulnerabilities/6702 Common Vulnerability Exposure (CVE) ID: CVE-2002-2149 BugTraq ID: 5333 http://www.securityfocus.com/bid/5333 Bugtraq: 20020727 Phenoelit Advisory 0815 ++ // Xedia (Google Search) http://online.securityfocus.com/archive/1/284649 http://www.iss.net/security_center/static/9705.php
Copyright	Copyright (C) 2009 LSS

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.