ID

10744

Nom

VisualRoute Web Server Detection

Auteurs

This script is Copyright (C) 2005-2009 Tenable Network Security, Inc.

Catégorie

Web Servers

Action

infos

Résumé

Extracts the banner of the remote visual route server

Description

Synopsis : A VisualRoute server is listening on the remote port. Description : VisualRoute is a web based solution which allows unauthenticated users to perform traceroutes against arbitrary hosts on the Internet. Solution : Disable this service if you do not use it. n/a Risk factor : None

IBM Lotus Domino ?ReadDesign Request Design Element Disclosure
Microsoft IIS Malformed File Extension URL DoS
Microsoft IIS 404 Response Service Pack Signature
WS-Management Server Detection
Microsoft IIS Multiple Remote DoS (MS02-018 / Q319733)
Web Server Long URL Handling Remote Overflow DoS
IBM WebSphere Application Server < 6.1.0.27 Multiple Vulnerabilities
WebLogic Server Double Dot GET Request Remote Overflow
Compaq Web Management Server Detection
Nortel Contivity HTTP Server cgiproc Special Character DoS
XEROX WorkCentre Web Services Extensible Interface Platform Unauthorized Access (XRX09-003)
Apache < 2.0.50 Multiple Remote DoS
Compaq Web-enabled Management Software HTTP Server Arbitrary Traffic Proxy
IBM Lotus Domino 6.0 Multiple Vulnerabilities
Resin Status Page Information Disclosure
Web Server Reverse Proxy Detection
Microsoft IIS Malformed HTTP Request Header Remote DoS
Eserv Web Server /? Request Forced Directory Listing
MikroTik RouterOS with Blank Password (HTTP)
NetworkActiv Web Server Encoded URL Request Remote DoS
mod_perl for Apache HTTP Server /perl/ Directory Listing
TinyWEB cgi-bin Crafted HTTP GET Request DoS
Microsoft IIS /iisadmpwd/aexp2.htr Password Policy Bypass
Microsoft IIS repost.asp File Upload
ipMonitor Encoded Traversal Arbitrary File Access
ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS
Obsolete Web Server Detection
Boa Web Server Traversal Arbtirary File Access/Execution
Anti-Nessus Defense Detection
Sun Java System ASP Server < 4.0.3 Multiple Vulnerabilities
Web Server SSL Port HTTP Traffic Detection
Microsoft FrontPage Unpassworded Installation
Sami HTTP Server 1.0.4 GET Request Remote Overflow
IBM Lotus Domino ?open Forced Directory Listing
PHP File Upload Capability Hidden Form Field Modification Arbitrary File Access
Microsoft IIS Remote Command Execution
Microsoft .NET Version Information Disclosure
Web Server No 404 Error Code Check
TelCondex Simple Webserver Buffer Overflow
Apache on Mac OS X HFS+ Arbitrary File Source Disclosure
Sun Java Web Console < 3.0.5 Remote File Enumeration
Apache < 2.2.9 Multiple Vulnerabilities (DoS, XSS)
Netscape / iPlanet .perf Remote Information Disclosure
Apache < 2.2.8 Multiple Vulnerabilities (XSS, DoS)
HTTP Proxy CONNECT Loop DoS
NaviCOPA < 3.01 6th February 2009 Multiple Vulnerabilities
PHP < 4.3.3 Multiple Vulnerabilities
Trend Micro OfficeScan Client Traversal Arbitrary File Access
IBM WebSphere Application Server 7.0 < Fix Pack 3
Microsoft IIS / Site Server codebrws.asp Arbitrary Source Disclosure
Polycom Videoconferencing Unit Detection
IBM Tivoli Provisioning Manager OS Deployment < 5.1.0.3 Interim Fix 3 HTTP Server Logging Functionality Remote Overflow
OmniHTTPd Pro Long POST Request DoS
IBM WebSphere Edge Caching Proxy DoS
ShowOff! Digital Media Software <= 1.5.4 Multiple Remote Vulnerabilities
VisualRoute Web Server Detection
Cherokee Web Server Malformed POST Request Remote DoS
Apache < 1.3.41 Multiple Vulnerabilities (DoS, XSS)
BadBlue ext.dll mfcisapicommand Parameter Remote Overflow
Apache on SuSE Linux cgi-bin-sdb Request Script Source Disclosure
Web Server HTTP Basic Authorization Header Remote Overflow DoS
Xeneo Web Server %A Request Remote DoS
Blue Coat Reporter Default Password (admin) for admin Account
Web Server Uses Plain Text Authentication Forms
Microsoft IIS Multiple .cnf File Information Disclosure
Web Server HTTP Header Memory Exhaustion DoS
iPlanet Chunked Encoding Processing Remote Overflow
Apache <= 1.3.33 htpasswd Local Overflow
KeyFocus (KF) Web Server Null Byte Request Restricted File / Directory Access
lighttpd < 1.4.20 Multiple Vulnerabilities
Apache < 2.0.55 Multiple DoS
Web Server Potentially Hosting Copyrighted Material
AnalogX SimpleServer:WWW Short GET /cgi-bin Remote DoS
thttpd Double Slash Request Arbitrary File Access
thttpd Host Header Traversal Arbitrary File Access
Zope < 2.6.3 Multiple Vulnerabilities
Microsoft IIS 5.0 WebDAV Malformed PROPFIND Request Remote DoS
HTTP Reverse Proxy Detection
Apache-SSL SSLVerifyClient SSLFakeBasicAuth Client Certificate Forgery
Sun Java System Web Server ::$DATA Extension Request JSP Resource Disclosure
OpenSSL < 0.9.6m / 0.9.7d Multiple Remote DoS
Microsoft IIS / Site Server viewcode.asp Arbitrary File Access
Network Camera Web Server Detection
mod_ssl ssl_util_uuencode_binary Remote Overflow
Netscape Enterprise Server Accept Header Remote Overflow
PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities
HTTP Protocol Version Detection
IBM Lotus Domino HTTP /cgi-bin Relative URL Request DoS
IBM WebSphere Application Server < 6.1.0.23 Multiple Flaws
Apache < 2.0.46 on OS/2 filestat.c Device Name Request DoS
IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
Broken Web Server Detection
NetScaler Web Management Interface Cookie Credentials Encryption Weakness
Microsoft IIS /scripts Directory Browsable
BadBlue Hex-encoded Null Byte Request Arbitrary File Access
Shambala Web Server Malformed HTTP GET Request DoS
IBM Lotus Domino HTML Hidden Field Encrypted Password Disclosure
Xerver < 4.20 Multiple Vulnerabilities
Apache <= 2.0.39 Win32 Crafted Traversal Arbitrary File Access
IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21268775)
NETGEAR ProSafe VPN Firewall Web Server Malformed Basic Authorization Header Remote DoS
NetScaler Unencrypted Web Management Interface
Apache Tomcat Cross-Application File Manipulation
XEROX WorkCenter Extensible Interface Platform Unspecified Security Bypass (XRX08-006)
WebDAV Directory Enumeration
Savant Web Server Malformed Content-Length DoS
Null httpd Content-Length Header Handling Remote Overflow
BEA WebLogic <= 8.1 SP4 Multiple Vulnerabilities (XSS, DoS, ID, more)
SilverStream Directory Listing
iPlanet Web Server shtml File Handling Remote Overflow
CCProxy < 6.62 HTTP Proxy CONNECT Request Handling Remote Overflow
Monkey HTTP Daemon (monkeyd) Post_Method Function Crafted Content-Length Header DoS
IBM Lotus Domino Directory Traversal Arbitrary File Access
Apache Multiviews Feature Arbitrary Directory Listing
Microsoft IIS .HTR ISAPI Filter Enabled
WebLogic SSL Certificate Chain User Spoofing
Microsoft IIS ISM.DLL HTR Request Remote Overflow
Apache mod_ssl i2d_SSL_SESSION Function SSL Client Certificate Overflow
Avirt Multiple Product HTTP Proxy Overflow
Icecast Multiple Unspecified Remote Overflows
Microsoft IIS Source Fragment Disclosure
Fastream NETFile FTP/Web Server HEAD Request Saturation DoS
MyServer HTTP POST Request Remote Overflow DoS
Apache < 1.3.29 Multiple Modules Local Overflow
MDaemon WebConfig HTTP Server URL Overflow DoS
oops WWW Proxy Server Reverse DNS Response Overflow
Ipswitch IMail Web Calendaring Server GET Request Traversal Arbitrary File Access
Apache 2.2 < 2.2.14 Multiple Vulnerabilities
Intrusion.com SecureNet Provider Detection
iPlanet Application Server Prefix Remote Overflow
Jetty < 4.2.19 HTTP Server HttpRequest.java Content-Length Handling Remote Overflow DoS
Apache < 1.3.31 mod_access IP Address Netmask Rule Bypass
HTTP Server type and version
PHP php_variables.c Multiple Variable Open Bracket Memory Disclosure
Resin for Windows Encoded URI Traversal Arbitrary File Access
LocalWeb2000 2.1.0 Multiple Remote Vulnerabilities
Apache Tomcat MS-DOS Device Name Request DoS
iChat Server Traversal Arbitrary File Access
HTTP Header Name Remote Format String
Icecast HTTP Header Processing Remote Overflow
XEROX WorkCentre Web Server Unspecified Command Injection (XRX09-002)
PHP < 4.0.4 IMAP Module imap_open() Function Overflow
Apache UserDir Directive Username Enumeration
Cherokee Web Server Port Bind Privilege Drop Weakness
Apache < 2.0.63 Multiple XSS Vulnerabilities
PHP socket_iovec_alloc() Function Overflow
Compaq WBEM HTTP Server Remote Overflow
Web Application Firewall Detection
Sun Java Web Console LibWebconsole_Services.SO Remote Format String
Apache Tomcat servlet/JSP container default files
AnalogX SimpleServer:WWW Encoded Traversal Arbitrary File Access
iPlanet Certificate Management Traversal Arbitrary File Access
Icecast HTTP Basic Authorization Remote Overflow DoS
Multiple Web Server on Windows MS/DOS Device Request Remote DOS
mod_gzip Detection
Xitami Web Server Administration Port Remote Overflow
Apache < 2.2.3 mod_rewrite LDAP Protocol URL Handling Overflow
Apache < 2.0.59 mod_rewrite LDAP Protocol URL Handling Overflow
Enhydra Multiserver Default Password
Intrusion.com SecureNet Sensor Detection
Apache mod_proxy_ftp Directory Component Wildcard Character Globbing XSS
Xerver Web Server < 2.20 Crafted C:/ Request Remote DoS
lighttpd Status Module Remote Information Disclosure
SMC 2652W AP Malformed HTTP Request Remote DoS
mod_frontpage for Apache fpexec Remote Overflow
JRun Multiple Vulnerabilities (OF, XSS, ID, Hijacking)
MiniShare Webserver HTTP GET Request Remote Overflow
Apache < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc)
Yaws Web Server .yaws Script Null Byte Request Source Code Disclosure
McAfee Common Management Agent 3.6.0 UDP Packet Handling Format String
PHP < 4.3.1 CGI Module Force Redirect Settings Bypass Arbitrary File Access
Microsoft IIS MDAC RDS (msadcs.dll) Arbitrary Remote Command Execution
Apache mod_status /server-status Information Disclosure
Resin Traversal Arbitrary File Access
Web Server HTTP GET Request Version Number Handling Remote Overflow
MDaemon WorldClient HTTP Server URL Overflow DoS
IBM Lotus Domino Crafted .nsf Request Authentication Bypass
CERN httpd Virtual Web Path Disclosure
Google Search Appliance Detection
RaidenHTTPD Crafted Request Script Source Disclosure
Sun Glassfish Default Administrator Credentials
mod_ntlm for Apache Multiple Remote Vulnerabilities
Web Server / Application favicon.ico Vendor Fingerprinting
ePolicy Orchestrator Symlink Arbitrary Privileged File Access
Microsoft IIS 5.0 Malformed HTTP Printer Request Header Remote Buffer Overflow
IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities
IBM WebSphere HTTP Request Header Remote Overflow
AnalogX SimpleServer:WWW Buffer Overflow
eDirectory < 8.8 SP3 FTF3 iMonitor HTTP Accept-Language Header Overflow
mod_mylo for Apache mylo_log Logging Function HTTP GET Overflow
Apache < 2.0.46 Multiple DoS
Eserv GET Request Traversal Arbitrary File Access
APSIS Pound Load Balancer Format String Overflow
Compaq Web-Based Management Agent Remote Overflow DoS
Pi3Web tstisap.dll Long URL Overflow
MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access
Sun GlassFish Enterprise < 2.1 Patch 02 Denial of Service
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
Web Server UDDI Detection
Apache Double Slash GET Request Forced Directory Listing
Microsoft IIS ASP ISAPI Filter Multiple Overflows
WebLogic Crafted GET Request Hostname Disclosure
Vulture Reverse Proxy Detection
Kerio MailServer < 6.0.1 Embedded HTTP Server Unspecified Issue
mod_perl Apache::Status URI XSS
Multiple Web Server Encoded Space (%20) Request ASP Source Disclosure
RaidenHTTPD < 1.1.34 Multiple Remote Vulnerabilities
lighttpd PHP File Trailing Slash Request Source Disclosure
Sun Java System Web Proxy Server Multiple Unspecified Remote DoS
CERN httpd CGI Name Handling Remote Overflow
Novell Open Enterprise Server Remote Manager (novell-nrm) POST Request Content-Length Overflow
WindWeb <= 2.0 Malformed GET Request Remote DoS
CERN httpd Double Slash Protected Webpage Bypass
Apache mod_include get_tag() Function Local Overflow
Apache mod_ssl ssl_compat_directive Function Overflow
PHP < 4.3.11 / 5.0.3 Multiple Unspecified Vulnerabilities
Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)
Netscape Administration Server /admin-serv/config/admpw Admin Password Disclosure
Microsoft IIS /iisadmin Unrestricted Access
Cabletron Web View Administrative Access
Compaq Web-enabled Management Software Default Account
Apache < 2.0.48 Multiple Vulnerabilities (OF, Info Disc.)
BadBlue Connection Saturation Remote DoS
Apache < 1.3.31 / 2.0.49 Socket Connection Blocking Race Condition DoS
Zope ZClass Modification Local DoS
Netscape Server ?wp-* Publishing Tags Forced Directory Listing
F5 BIG-IP Web Management Interface Detection
Polipo < 0.9.9 Unspecified Traversal Arbitrary File Access
Web Server HTTP OPTIONS Method URL Handling Remote Overflow
Apache Auth Module SQL Injection
IBM Lotus Domino HTTP Server Filesystem Setup Disclosure
HTTP Method Remote Format String
Web Server GET Request Saturation Remote DoS
Apache < 2.0.47 Multiple Vulnerabilities (DoS, Encryption)
Embedded Web Server Detection
IBM Lotus Domino < 8.0.1 / 7.0.3 FP1 Multiple Vulnerabilities
Personal Web Sharing Long HTTP Request DoS
Pi3Web < 2.0.1 CGI Handler Long Parameter Handling Overflow
thttpd 2.0.7 Directory Traversal (Windows)
Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities
WebServer 4 Everyone Host Field Header Buffer Overflow
PHP4 for Apache on Windows php.exe Malformed Request Path Disclosure
MS01-035: Microsoft IIS FrontPage fp30reg.dll Remote Overflow (uncredentialed check)
WsMp3 Daemon (WsMp3d) HTTP Traversal Arbitrary File Execution/Access
Apache mod_imap Image Map Referer XSS
Web Server Uses Basic Authentication
Apple Mac OS X Find-By-Content .DS_Store Web Directory Listing
XEROX WorkCentre Web Server Unspecified Command Injection (XRX09-001)
Apache Tomcat mod_jk Invalid Transfer-Encoding Chunked Field DoS
Sun NetBeans Java IDE HTTP Server IP Restriction Bypass Arbitrary File/Directory Access
mod_access_referer 1.0.2 for Apache Malformed Referer DoS
Proxy Web Server XSS
Icecast Crafted URI Remote DoS
WebWasher Classic Server Mode Arbitrary Proxy CONNECT Request
Apache on Windows < 1.3.24 / 2.0.34 DOS Batch File Arbitrary Command Execution
Apache Tomcat Default Error Page Version Detection
NaviCOPA Trailing Dot Source Code Disclosure
Microsoft Content Management Server (MCMS) 2001 Multiple Remote Vulnerabilities
Web Server robots.txt Information Disclosure
FTPGate Web Proxy Traversal Arbitrary File Access
Microsoft Media Services ISAPI nsiislog.dll Multiple Overflows
lighttpd on Windows Crafted Filename Request Script Source Disclosure
Abyss Web Server MS-DOS Device Name DoS
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
Microsoft IIS perl.exe HTTP Path Disclosure
Microsoft IIS Cookie information disclosure
Microsoft IIS 5 .printer ISAPI Filter Enabled
Blue Coat Reporter Detection
nginx HTTP Request Multiple Vulnerabilities
HyperText Transfer Protocol (HTTP) Information
A-A-S Application Access Server Detection
Proxomitron GET Request Overflow Remote DoS
Xeneo Web Server 2.2.9.0 GET Request Remote Overflow DoS
ePolicy Orchestrator HTTP /spipe/pkg/ Source Header Remote Overflow
Sambar Server Default Accounts
Apache < 2.0.43 Multiple Vulnerabilities (Log Injection, Source Disc.)
Pi3Web Malformed GET Request Remote Overflow
Web Server Unconfigured - Default Install Page Present
BadBlue ISAPI Extension ext.dll LoadPage Parameter Arbitrary File Access
Web Server HTTP Header Internal IP Disclosure
Netscape Server ?PageServices Request Forced Directory Listing
Easy File Sharing Web Server Multiple Remote Vulnerabilities (FS, XSS, Upload)
Caudium Web Server Malformed URI Remote DoS
Apache mod_proxy Content-Length Overflow
IBM WebSphere Application Server < 6.0.2.35 Multiple Vulnerabilities
Microsoft .NET Handlers Enumeration
Icecast utils.c fd_write Function Format String
Citrix NFuse Server launch.asp Arbitrary Server/Port Redirect
Web Server HTTP Authorization Header Remote Overflow
NaviCOPA Encoded Space Request Source Code Disclosure
mod_auth_any for Apache Metacharacter Remote Command Execution
Apache <= 2.0.51 Satisfy Directive Access Control Bypass
Microsoft IIS Frontpage Server Extensions (FPSE) Malformed Form DoS
Apache Tomcat /server-status Information Disclosure
Monkey HTTP Daemon (monkeyd) PostMethod() Function Remote Overflow
Sami HTTP Server Multiple Remote Vulnerabilities
XEROX Document Centre Web Server Unspecified Unauthorised Access
Resin MS-DOS Device Request Path Disclosure
Roxen Web Server /%00/ Encoded Request Forced Directory Listing
Web Server HTTP 1.0 Header Remote Overflow
Netscape FastTrack get Command Forced Directory Listing
Apache < 2.0.51 Multiple Vulnerabilities (OF, DoS)
Apache Tomcat Manager Common Administrative Credentials
ePolicy Orchestrator Multiple Remote Vulnerabilities (OF, FS)
DD-WRT HTTP Daemon Metacharacter Injection Remote Code Execution
Icecast / libshout Multiple Remote Overflows
Oracle WebLogic Server Plug-in Remote Overflow (1166189)
mod_perl Apache::Status Info Disclosure
mod_gzip Debug Mode mod_gzip_printf Remote Format String
Web Server HTTP Cookie Header Remote Overflow
OpenVMS WASD HTTP Server Multiple Vulnerabilities
12Planet Chat Server Administration Authentication ClearText Credential Disclosure
OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities
BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass
IBM WebSphere Application Server 6.1 < Fix Pack 19 Multiple Flaws
OpenText FirstClass HTTP Daemon /Search Large Request Remote DoS
Abyss Web Server GET Request Multiple Vulnerabilities
MultiTech Proxy Server Default Null Password
Nonexistent Page (404) Physical Path Disclosure
IBM WebSphere Application Server 7.0 < Fix Pack 5
Apache Tomcat Default Accounts
Microsoft IIS Traversal GET Request Remote DoS
Web Server Allows Password Auto-Completion
Web Server Crafted Request Vendor/Version Information Disclosure
mod_survey For Apache ENV Tags SQL Injection
BrowseGate HTTP MIME Headers Remote Overflow
Microsoft IIS bdir.htr Arbitrary Directory Listing
Sun AnswerBook2 Web Server dwhttpd GET Request Remote Format String
HTTP Header Value Remote Format String
Easy File Sharing Web Server Crafted Request ADS Arbitrary File Access
NetScaler Web Management Interface Detection
Jigsaw Webserver MS/DOS Device Request Remote DoS
Microsoft IIS WebDAV Unicode Request Directory Security Bypass
Apache WebDAV Module PROPFIND Arbitrary Directory Listing
BadBlue Malformed GET Request Remote DoS
Yawcam Web Server Traversal Arbitrary File Access
Apache < 2.0.44 DOS Device Name Multiple Remote Vulnerabilities (Code Exec, DoS)
IBM Tivoli SecureWay WebSEAL Proxy Policy Director Encoded URL DoS
Microsoft IIS WebDAV ntdll.dll Remote Overflow (MS03-007)
Web Server PROPFIND Method Internal IP Disclosure
mod_python < 2.7.8 Module Importing Privilege Function Execution
Sambar Server Cleartext Password Transmission
Protected Web Page Detection
Xitami Malformed POST Request Infinite Loop Remote DoS
Oracle WebLogic Server mod_wl POST Request Remote Overflow
HTTP Server Cookies Set
iPlanet Directory Server Traversal Arbitrary File Access
iPlanet Web Server Enterprise Edition URL-encoded Host: Information Disclosure
Zope < 2.3.3 ZClass Permission Mapping Modification Local Privilege Escalation
Microsoft IIS .HTR Filter Multiple Overflows (MS02-028)
SWS Web Server Unfinished Line Remote DoS
Microsoft FrontPage Extensions MS-DOS Device Request DoS
Microsoft IIS IDA/IDQ Multiple Vulnerabilities
IBM Lotus Domino Server Crafted .nsf Request Traversal Arbitrary File Access
LiteServe HTTP Service Malformed URL Decoding Remote DoS
Apache Tomcat AJP12 Protocol Malformed Packet Remote DoS
Apache mod_info /server-info Information Disclosure
ePolicy Orchestrator HTTP GET Request Remote Format String
Resin for Windows \WEB-INF Traversal Arbitrary File Access
Netscape Enterprise Server Long Traversal Request Remote DoS
IBM WebSphere Application Server 7.0 < Fix Pack 1
thttpd 2.04 If-Modified-Since Header Remote Buffer Overflow
GeoHttpServer Unauthorized Image Access Vulnerability
CommuniGate Pro HTTP Configuration Port Remote Overflow
MDG Web Server 4D GET Request Remote Overflow
Polycom ViaVideo Web Server Incomplete HTTP Connection Saturation Remote DoS
Cherokee Web Server URI Traversal Arbitrary File Access
Apache mod_ssl Plain HTTP Request DoS
Easy File Sharing Web Server disk_c Virtual Folder Request Arbitrary File Access
Microsoft IIS WebDAV SEARCH Method Arbitrary Directory Forced Listing
Apache 2.x < 2.2.12 Multiple Vulnerabilities
Dell Remote Access Controller Default Password (calvin) for root Account
Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Remote Overflow (MS03-051 / 813360)
Microsoft FrontPage Extensions Check
Zope Malformed XML RPC Request Path Disclosure
iPlanet Search Engine search CGI Arbitrary File Access
Sun Java System Web Proxy Server Unspecified Remote Overflow
Apache < 2.0.45 Multiple Vulnerabilities (DoS, File Write)
Oracle WebLogic Server mod_wl Invalid Parameter Remote Overflow (1150354)
lighttpd Null Byte Request CGI Script Source Code Disclosure
Zope Image and File Update Data Protection Bypass
Web Server Incomplete Basic Authentication DoS
IBM Lotus Domino Administration Databases Anonymous Access
Netscape Enterprise Web Publishing INDEX Command Arbitrary Directory Listing
Microsoft IIS ISAPI Virtual Directory UNC Mapping ASP Source Disclosure
IBM Tivoli Provisioning Manager OS Deployment Multiple Unspecified Input Validation Vulnerabilities
Microsoft SharePoint Server Detection
Netscape Enterprise Server SSL Handshake DoS
Apache mod_ssl ssl_hook_Access Error Handling DoS
A-A-S Application Access Server Default Admin Password
lighttpd mod_fastcgi HTTP Request Header Remote Overflow
Zope < 2.1.7 DocumentTemplate Unauthorized DTML Entity Modification
12Planet Chat Server Error Message Path Disclosure
Cherokee Web Server auth_pam Authentication Format String
Apache-SSL < 1.3.23+1.46 i2d_SSL_SESSION Function SSL Client Certificate Overflow
HTTP URI Handling Format String
Web Server Directory Enumeration
MiniWebsvr GET Request Traversal Arbitrary File Access
Apache < 1.3.31 / 2.0.49 Log Entry Terminal Escape Sequence Injection
CCProxy Logging Compoent HTTP GET Request Remote Overflow
Web Server HTTP POST Method Handling Remote Overflow
Microsoft .NET Custom Errors Not Set
IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities
PHP Safe Mode mail Function 5th Parameter Arbitrary Command Execution
Web Server HTTP Method Handling Remote Overflow
URLScan for IIS Detection
TeamSpeak Server Administration Detection
SimpleServer:WWW Encoded Traversal Arbitrary Command Execution
HTTP TRACE / TRACK Methods Allowed
Zope Invalid Query Path Disclosure
Samba SWAT HTTP Basic Auth base64 Overflow
Microsoft IIS Authentication Method Enumeration
PHP mime_split Function POST Request Overflow
Apache < 2.0.44 Illegal Character Default Script Mapping Bypass
Apache < 1.3.28 Multiple Vulnerabilities (DoS, ID)
IBM WebSphere Application Server 6.1 < Fix Pack 21 Multiple Flaws
MyServer <= 0.4.2 Multiple Remote DoS
NetScaler Web Management Successful Authentication
MetaInfo Web Server Traversal Arbitrary Command Execution
Apache Banner Linux Distribution Disclosure
Apache ASP module Apache::ASP source.asp Example File Arbitrary File Creation
Microsoft Data Access Components RDS Data Stub Remote Overflow
Web Server Directory Traversal Arbitrary File Access
AnalogX SimpleServer:WWW /cgi-bin/ Long GET Request DoS
Microsoft IIS Unicode Remote Command Execution
Web Server Uses Non Random Session IDs
XEROX MicroServer Web Server Directory Navigation Crafted URL DoS (XRX05-004)
WebLogic Encoded Request Forced Directory Listing
IBM Lotus Domino Banner Nonexistent .pl File Request Path Disclosure
04WebServer Multiple Vulnerabilities (XSS, DoS, more)
Apache Chunked Encoding Remote Overflow
Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass
NaviCOPA ::$DATA Extension Request Source Code Disclosure
SEDUM HTTP Server Long HTTP Request Overflow DoS
Microsoft FrontPage Extensions authors.pwd Information Disclosure
Web mirroring
NetScaler Web Management Interface IP Address Cookie Information Disclosure
CiscoSecure ACS for Windows CSAdmin Login Overflow DoS
Novell GroupWise Enhancement Pack Java Server URL Handling Overflow DoS
Imail Host: Header Field Handling Remote Overflow
Microsoft IIS .IDA ISAPI Filter Enabled
Web Server HTTP Dangerous Method Detection
Apache-SSL ExpandCert() Function Certificate Handling Arbitrary Environment Variables Manipulation
Web Server Load Balancer Detection
F5 BIG-IP Cookie Information Disclosure
LabVIEW Web Server HTTP Get Newline DoS
IBM Lotus Domino Web Service NLSCCSTR.DLL Malformed GET Request Overflow DoS
Web Server HTTP 1.1 Header Remote Overflow
IBM WebSphere Application Server < 6.1.0.17 Multiple Vulnerabilities
Microsoft IIS 5.0 ServerVariables_Jscript.asp Path Disclosure
Microsoft FrontPage Extensions shtml.exe Remote Overflow
PHP rfc1867.c $_FILES Array Crafted MIME Header Arbitrary File Upload
Microsoft IIS WebHits null.htw .asp Source Disclosure
IBM Tivoli Provisioning Manager OS Deployment Multiple Stack Overflows
Alibaba Web Server 2.0 HTTP Request Overflow DoS
4D WebStar Arbitrary Multiple Vulnerabilities
Orange Web Server Malformed HTTP Request Remote DoS
Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS
Apache < 1.3.37 mod_rewrite LDAP Protocol URL Handling Overflow
mod_python < 2.7.9 / 3.0.4 Malformed Query String DoS
Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
Multiple Web Server ~nobody/ Request Arbitrary File Access
Web Server HTTP Header Handling Remote Overflow
Zeus Web Server Null Byte Request CGI Source Disclosure
Ruby on Rails Multiple Method Session Fixation
Savant Web Server Multiple Percent Request Remote DoS
RaidenHTTPD Crafted Request Arbitrary File Access
Jigsaw < 2.2.4 Unspecified URI Parsing Vulnerability
Apache mod_jk2 Host Header Multiple Fields Remote Overflow
HMAP Web Server Fingerprinting
Apache Tomcat contextAdmin Arbitrary File Access
Novell GroupWise MTA Web Console Accessible
Apache < 1.3.27 Multiple Vulnerabilities (DoS, XSS)
Apache for Windows Multiple Forward Slash Directory Listing
Apache mod_ssl ssl_engine_log.c mod_proxy Hook Function Remote Format String
WebDAV Detection
Web Server HTTP User-Agent Header Handling Remote Overflow
Abyss Web Server Malformed GET Request Remote DoS