Test ID:	1.3.6.1.4.1.25623.1.0.102004
Category:	Buffer overflow
Title:	www too long url
Summary:	Remote web server is vulnerable to the too long URL vulnerability. It might be; possible to gain remote access using buffer overflow.
Description:	Summary: Remote web server is vulnerable to the too long URL vulnerability. It might be possible to gain remote access using buffer overflow. Solution: Upgrade vulnerable web server to latest version. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0002 BugTraq ID: 889 http://www.securityfocus.com/bid/889 Bugtraq: 19991223 Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT (Google Search) http://marc.info/?l=bugtraq&m=94598388530358&w=2 Bugtraq: 20000128 ZBServer 1.50-r1x exploit (WinNT) (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=36B0596E.8D111D66@teleline.es http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556 XForce ISS Database: zbserver-get-bo Common Vulnerability Exposure (CVE) ID: CVE-2000-0065 XForce ISS Database: inetserv-get-bo Common Vulnerability Exposure (CVE) ID: CVE-2000-0571 BugTraq ID: 1423 http://www.securityfocus.com/bid/1423 Bugtraq: 20000703 Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs@ussrback.com XForce ISS Database: localweb-get-bo(4896) https://exchange.xforce.ibmcloud.com/vulnerabilities/4896 Common Vulnerability Exposure (CVE) ID: CVE-2001-1250 BugTraq ID: 2979 http://www.securityfocus.com/bid/2979 Bugtraq: 20010629 4 New vulns. vWebServer and SmallHTTP (Google Search) http://online.securityfocus.com/archive/1/194418 http://www.iss.net/security_center/static/6771.php Common Vulnerability Exposure (CVE) ID: CVE-2003-0125 BugTraq ID: 7067 http://www.securityfocus.com/bid/7067 http://www.krusesecurity.dk/advisories/routefind550bof.txt XForce ISS Database: routefinder-vpn-options-bo(11514) https://exchange.xforce.ibmcloud.com/vulnerabilities/11514 Common Vulnerability Exposure (CVE) ID: CVE-2003-0833 Debian Security Information: DSA-392 (Google Search) http://www.debian.org/security/2003/dsa-392 Common Vulnerability Exposure (CVE) ID: CVE-2006-1652 BugTraq ID: 17378 http://www.securityfocus.com/bid/17378 Bugtraq: 20060404 Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (Google Search) http://www.securityfocus.com/archive/1/429930/100/0/threaded Bugtraq: 20060405 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (Google Search) http://www.securityfocus.com/archive/1/430287/100/0/threaded Bugtraq: 20060411 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer POC (Google Search) http://www.securityfocus.com/archive/1/430711/100/0/threaded https://www.exploit-db.com/exploits/1642 https://www.exploit-db.com/exploits/1643 http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html http://secunia.com/advisories/19513 http://securityreason.com/securityalert/674 http://www.vupen.com/english/advisories/2006/1240 XForce ISS Database: ultr@vnc-vnclogreallyprint-bo(25650) https://exchange.xforce.ibmcloud.com/vulnerabilities/25650 XForce ISS Database: untr@vnc-error-bo(25648) https://exchange.xforce.ibmcloud.com/vulnerabilities/25648 Common Vulnerability Exposure (CVE) ID: CVE-2004-2299 BugTraq ID: 10376 http://www.securityfocus.com/bid/10376 Bugtraq: 20040518 Overflow@OmniHTTPd (Google Search) http://www.securityfocus.com/archive/1/363651 http://www.osvdb.org/12944 XForce ISS Database: omnithttpd-range-header-bo(16190) https://exchange.xforce.ibmcloud.com/vulnerabilities/16190 Common Vulnerability Exposure (CVE) ID: CVE-2002-1003 BugTraq ID: 5184 http://www.securityfocus.com/bid/5184 Bugtraq: 20020708 Foundstone Advisory - Buffer Overflow in MyWebServer (fwd) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html http://www.iss.net/security_center/static/9501.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1012 BugTraq ID: 5233 http://www.securityfocus.com/bid/5233 Bugtraq: 20020715 Tivoli TMF ManagedNode Buffer Overflow (Google Search) http://online.securityfocus.com/archive/1/282283 http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html http://www.iss.net/security_center/static/9556.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1011 BugTraq ID: 5235 http://www.securityfocus.com/bid/5235 Bugtraq: 20020715 Tivoli TMF Endpoint Buffer Overflow (Google Search) http://online.securityfocus.com/archive/1/282292 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html http://www.iss.net/security_center/static/9555.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0836 Bugtraq: 20011018 def-2001-30 (Google Search) http://marc.info/?l=bugtraq&m=100342151132277&w=2 Bugtraq: 20011024 Oracle9iAS Web Cache Overflow Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=100395487007578&w=2 http://www.cert.org/advisories/CA-2001-29.html CERT/CC vulnerability note: VU#649979 http://www.kb.cert.org/vuls/id/649979 http://www.osvdb.org/5534 XForce ISS Database: oracle-appserver-http-bo(7306) https://exchange.xforce.ibmcloud.com/vulnerabilities/7306 Common Vulnerability Exposure (CVE) ID: CVE-2005-1173 Bugtraq: 20050418 ERNW Security Advisory 01/2005 (Google Search) http://marc.info/?l=bugtraq&m=111384806002021&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2002-1905 BugTraq ID: 5964 http://www.securityfocus.com/bid/5964 Bugtraq: 20021013 Security vulnerabilities in Polycom ViaVideo Web component (Google Search) http://online.securityfocus.com/archive/1/295146 http://www.iss.net/security_center/static/10359.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1212 BugTraq ID: 5967 http://www.securityfocus.com/bid/5967 http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true http://www.iss.net/security_center/static/10372.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1120 BugTraq ID: 5686 http://www.securityfocus.com/bid/5686 https://www.exploit-db.com/exploits/16770/ http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html http://www.iss.net/security_center/static/10076.php Common Vulnerability Exposure (CVE) ID: CVE-2000-0641 BugTraq ID: 1453 http://www.securityfocus.com/bid/1453 Bugtraq: 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html XForce ISS Database: savant-get-bo(4901) https://exchange.xforce.ibmcloud.com/vulnerabilities/4901 Common Vulnerability Exposure (CVE) ID: CVE-2002-1166 BugTraq ID: 5831 http://www.securityfocus.com/bid/5831 Bugtraq: 20020930 iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server (Google Search) http://marc.info/?l=bugtraq&m=103340145725050&w=2 http://www.osvdb.org/9836 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html http://www.iss.net/security_center/static/10223.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0123 BugTraq ID: 3874 http://www.securityfocus.com/bid/3874 Bugtraq: 20020114 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability (Google Search) http://online.securityfocus.com/archive/1/250242 http://www.iss.net/security_center/static/7879.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0820 BugTraq ID: 2879 http://www.securityfocus.com/bid/2879 BugTraq ID: 2965 http://www.securityfocus.com/bid/2965 Bugtraq: 20010617 Buffer Overflow in GazTek HTTP Daemon v1.4 (ghttpd) (Google Search) http://marc.info/?l=bugtraq&m=99279182704674&w=2 Bugtraq: 20010630 Advisory Ghttp 1.4 (Google Search) http://marc.info/?l=bugtraq&m=99406263214417&w=2 XForce ISS Database: gaztek-ghttpd-bo(6702) https://exchange.xforce.ibmcloud.com/vulnerabilities/6702 Common Vulnerability Exposure (CVE) ID: CVE-2002-2149 BugTraq ID: 5333 http://www.securityfocus.com/bid/5333 Bugtraq: 20020727 Phenoelit Advisory 0815 ++ // Xedia (Google Search) http://online.securityfocus.com/archive/1/284649 http://www.iss.net/security_center/static/9705.php
Copyright	Copyright (C) 2009 LSS

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.