t. hauck jana web server vulnerabilities and exploits

(subscribe to this query)

Signedness error in Thomas Hauck Jana Server 2.x up to and including 2.2.1, and 1.4.6 and previous versions, allows remote malicious users to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta2 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1

Thomas Hauck Jana Server 2.x up to and including 2.2.1, and 1.4.6 and previous versions, allows remote malicious users to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta2

Thomas Hauck Jana Server 1.4.6 and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a bu...

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta2 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1

Multiple buffer overflows in Thomas Hauck Jana Server 2.x up to and including 2.2.1, and 1.4.6 and previous versions, allow remote malicious users to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an...

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta2

Thomas Hauck Jana Server 2.x up to and including 2.2.1, and 1.4.6 and previous versions, generates different responses for valid and invalid usernames, which allows remote malicious users to identify valid users on the server.

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta2 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1

Thomas Hauck Jana Server 2.x up to and including 2.2.1, and 1.4.6 and previous versions, does not restrict the number of unsuccessful login attempts, which makes it easier for remote malicious users to gain privileges via brute force username and password guessing.

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 2.0 T. Hauck Jana Web Server 2.0 Beta1 T. Hauck Jana Web Server 2.2.1 T. Hauck Jana Web Server 2.0 Beta2

T. Hauck Jana Webserver 1.46 and previous versions allows a remote malicious user to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).

T. Hauck Jana Web Server 1.0j T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 2.0 Beta 1 T. Hauck Jana Web Server

1 EDB exploit

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote malicious users to ready arbitrary files via a "......" (modified dot dot) attack.

T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.40 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46

1 EDB exploit

T. Hauck Jana Webserver 2.01 beta 1 and previous versions allows a remote malicious user to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).

T. Hauck Jana Web Server 2.0b2 T. Hauck Jana Web Server 2.0beta1 T. Hauck Jana Web Server 1.45 T. Hauck Jana Web Server 1.46

1 EDB exploit

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote malicious users to ready arbitrary files via a .. (dot dot) attack.

T. Hauck Jana Web Server 1.46 T. Hauck Jana Web Server 1.0 T. Hauck Jana Web Server 1.45

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook