The remote web server crashes when it receives a too long URL. It might be possible to make it execute arbitrary code through this flaw.

The remote HTTP server allows an attacker to read arbitrary files on the remote host with the privileges of the web server, simply by adding a slash in front of its name. 

For instance, 'GET //etc/passwd' will return the contents of the remote file '/etc/passwd'.

When the remote web server is issued a request with a lower-case 'get', it will return a directory listing even if a default page such as index.html is present. 		For example :
		get / HTTP/1.0

will return a listing of the root directory. 

This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the presence of files that are not intended to be visible.

The version of Netscape Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by using a crafted URL request with '?PageServices' appended, to display a listing of the page directory, which may contain sensitive files.

The remote MetaInfo web server (installed with MetaInfo's Sendmail or MetaIP servers) has an arbitrary command execution vulnerability. It is possible to read files or execute arbitrary commands by prepending the appropriate number of '../' to the desired filename. A remote attacker could exploit this to execute arbitrary commands on the system.

It was possible to obtain the physical location of a virtual web directory of this host by issuing a request for a non-existent file with an IISAPI-registered extension.

An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks.

It is possible to crash IIS by sending the request GET ../../'

The remote IIS web server is affected by a remote buffer overflow vulnerability. A malformed request for an .HTR, .STM, or .IDC file could lead to a denial of service, or possibly remote arbitrary code execution.

iChat servers up to version 3.00 allow any user to read arbitrary files on the target system using a directory traversal attack.

ID	Name	Severity
10320	Web Server Long URL Handling Remote Overflow DoS	high
10286	thttpd Double Slash Request Arbitrary File Access	medium
10156	Netscape FastTrack get Command Forced Directory Listing	medium
10153	Netscape Server ?PageServices Request Forced Directory Listing	medium
10141	MetaInfo Web Server Traversal Arbitrary Command Execution	critical
10120	Microsoft IIS perl.exe HTTP Path Disclosure	medium
10117	Microsoft IIS Traversal GET Request Remote DoS	medium
10116	Microsoft IIS ISM.DLL HTR Request Remote Overflow	critical
10110	iChat Server Traversal Arbitrary File Access	medium

Detections

Analytics

Web Servers Family for Nessus

high

medium

medium

medium

critical

medium

medium

critical

medium