ID

11030

Nom

Apache chunked encoding

Auteurs

This script is Copyright (C) 2002 Renaud Deraison

Catégorie

Gain a shell remotely

Action

mixed

Résumé

Checks for version or behavior of Apache

Description

The remote host appears to be vulnerable to the Apache Web Server Chunk Handling Vulnerability. If Safe Checks are enabled, this may be a false positive since it is based on the version of Apache. Although unpatched Apache versions 1.2.2 and above, 1.3 through 1.3.24 and 2.0 through 2.0.36, the remote server may be running a patched version of Apache Solution : Upgrade to version 1.3.26 or 2.0.39 or newer See also : http://httpd.apache.org/info/security_bulletin_20020617.txt http://httpd.apache.org/info/security_bulletin_20020620.txt Risk factor : High

Hobbit Monitor < 4.1.0 Malformed Message Vulnerability
qpopper Qvsnprintf buffer overflow
MailEnable SE SMTP Command Format String Vulnerability
NSS Library SSLv2 Challenge Overflow
Gauntlet overflow
Fenice <= 1.10 Multiple Remote Vulnerabilities (OF, DoS)
Mercury IMAP Server SEARCH Command Buffer Overflow Vulnerability
TWiki INCLUDE Function Command Execution Vulnerability
IBM DB2 Multiple Vulnerabilities
MDaemon IMAP CREATE overflow
Yard Radius Remote Buffer Overflow Vulnerability
SSH Kerberos issue
Gopherd Buffer Overflow
MCMS : Buffer overflow in Profile Service
Easy File Sharing FTP Server PASS Command Overflow
BEA WebLogic <= 8.1 SP4 Multiple Vulnerabilities
MailMax SMTP / IMAP overflows
rwhois format string attack
Perdition IMAP Tag Format String Vulnerability
Asterisk SIP Channel T.38 SDP Parsing Buffer Overflow Vulnerabilities
Magic WinMail Format string
Apache chunked encoding
mod_mylo overflow
LPRng malformed input
MailEnable IMAP Overflow and SMTP Vulnerabilities
scp File Create/Overwrite
Citadel/UX Username overflow
iTunes For Windows Local Code Execution Vulnerability
OpenSSH Client Unauthorized Remote Forwarding
Squid Remote NTLM auth buffer overflow
ELOG Remote Buffer Overflow Vulnerabilities
Ebola 0.1.4 buffer overflow
SpamAssassin Arbitrary Command Execution Vulnerability
Macromedia JRun Multiple Vulnerabilities
iTunes AAC File Integer Overflow Vulnerability (network check)
NNTP message headers overflow
Open WebMail vacation.pl Arbitrary Command Execution
Debian OpenSSH/OpenSSL Package Random Number Generator Weakness
GNU Mailutils <= 0.6 Multiple Vulnerabilities
mod_ssl hook functions format string vulnerability
CCProxy Logging Function Overflow
SSH 3.0.0
Qpopper LIST buffer overflow
gpsd remote format string vulnerability
rsh with null username
PeerCast Buffer Overflow Vulnerability
Kerio MailServer < 6.0.1
SSH Overflow
AXIGEN Mail Server AXIMilter CNHO Command Remote Format String
qpopper euidl problem
Omron WorldView Wnn Overflow
GpsDrive friendsd2 Remote Format String
Intersoft NetTerm Netftpd USER Buffer Overflow Vulnerability
IMAP4buffer overflow in the BODY command
Icecast HTTP Header Buffer Overflow
3Proxy logurl() Buffer Overflow
Citadel/UX Format String Vulnerability
Cherokee directory traversal flaw
iTunes < 7.4 Malformed Music File Heap Overflow (Network Check)
tanned format string vulnerability
Mercury ph Server Buffer Overflow Vulnerability
Cyrus IMAP pre-login buffer overrun
Zend Session Clustering Daemon Buffer Overflow Vulnerability
gnocatan multiple buffer overflows
Tftpd32 Format String Vulnerability
uw-imap buffer overflow after logon
OpenSSH < 3.0.1
TFTPD overflow
Open WebMail userstat.pl Arbitrary Command Execution
NAI Management Agent overflow
CUPS < 1.1.23 Multiple Vulnerabilities (Overflow, DoS, Access Bypass)
SSH 3 AllowedAuthentication
iPlanet Application Server Buffer Overflow
Cherokee auth_pam format string vulnerability
OpenSSH 2.5.x -> 2.9.x adv.option
Courier IMAP remote overflows
CesarFTP multiple overflows
Lotus Domino Vulnerabilities
Mail-it Now! Upload2Server Arbitrary File Upload Vulnerability
OpenSSL overflow via invalid certificate passing
Lotus Domino Server Date Fields Overflow Vulnerability
rwhois format string attack (2)
PeerCast Format String Vulnerability
Cyrus IMAPD Multiple Remote Overflow Vulnerabilities
Apache < 2.0.44 DOS Device Name Multiple Remote Vulnerabilities (Code Exec, DoS)
SSH Insertion Attack
wsmp3d command execution
Firefly Media Server ws_getpostvars Function Content-Length Header HTTP Request Handling Overflow
Netscape Enterprise Accept buffer overflow
Mercury Mail Remote IMAP Stack Buffer Overflow Vulnerability
UW IMAP Mailbox Name Buffer Overflow
F-Secure SSH Password Authentication Policy Evasion
NetWin DMail Two Vulnerabilities
PicoZip ZipInfo.dll Buffer Overflow Vulnerability
Ipswitch IMail IMAP EXAMINE Argument Buffer Overflow Vulnerability
Apache-SSL overflow
ipswitch IMail Server Delete Command Buffer Overflow
SHOUTcast Format String Attack
MailMax IMAP overflows (2)
ClamAV < 0.94.1 get_unicode_name() Off-by-One Buffer Overflow
GNU Mailutils imap4d Search Command Format String Vulnerability
Canna Overflow
TFTPD small overflow
IMAP4rev1 buffer overflow after logon
Alt-N MDaemon Imap Multiple Buffer Overflows
BadBlue ext.dll mfcisapicommand Parameter Remote Overflow
Firefly Media Server webserver.c ws_addarg Function /xml-rpc Authorization Header Remote Format String
SSH1 SSH Daemon Logging Failure
WFTPD APPE Command Buffer Overflow Vulnerability
ipop2d buffer overflow
BayTech RPC3 Telnet Daemon Authentication Bypass Vulnerability
Kerio WebMail v5 multiple flaws
Open WebMail Arbitrary Code Execution Vulnerability
libgtop_daemon format string
netscape imap buffer overflow after logon
OpenSSH 2.3.1 authentication bypass vulnerability
mod_ntlm overflow / format string bug
rsh on finger output
Novell NetMail IMAP Agent Multiple Buffer Overflows
Multiple vulnerabilities in CUPS
VLC < 0.8.6e httpd format string
BitKeeper remote command execution
Cherokee remote command execution
iWS shtml overflow
Squid overflows
PeerCast handshakeHTTP Buffer Overflow Vulnerability
cfengine CFServD transaction packet buffer overrun vulnerability
WinProxy HTTP CONNECT Buffer Overflow Vulnerability
FakeBO buffer overflow
Mercury IMAP Server Login Command Buffer Overflow Vulnerability
ActiveSync packet overflow
Cyrus IMAP Multiple Overflow Vulnerabilities
Kerio MailServer < 6.0.3
/bin/login overflow exploitation
Sun Java System Directory Server Multiple Vulnerabilities
shtml.exe overflow
Citadel/UX select() bitmap remote buffer overflow
NNTP password overflow
mod_ssl SSL_Util_UUEncode_Binary Overflow
SSH Secure-RPC Weak Encrypted Authentication
Batalla Naval Overflow
dnsmasq Multiple Remote Vulnerabilities
Oops buffer overflow
Sentinel License Manager Remote Buffer Overflow Vulnerability
Debian OpenSSH/OpenSSL Package Random Number Generator Weakness (SSL check)