Записи sambar
19 опубликованных записей вендора sambar.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 5,3 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
19 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
43В плане | CVE-2004-2086Готовый эксплойт | Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of sambar · sambar server | Средняя5,0 | — | 75,4 % | 6 февр. 2004 г. |
41В плане | CVE-2000-0509Эксплойта нет | Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands viasambar · sambar server | Критическая10,0 | — | 4,3 % | 1 июн. 2000 г. |
33Наблюдать | CVE-2002-0128Proof of concept | cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, visambar · sambar server | Высокая7,5 | — | 10,1 % | 25 мар. 2002 г. |
31Наблюдать | CVE-2003-1286Proof of concept | HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTsambar · sambar server | Высокая7,5 | — | 3,3 % | 31 дек. 2003 г. |
31Наблюдать | CVE-2001-1292Эксплойта нет | Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.sambar · sambar server | Высокая7,5 | — | 2,8 % | 13 авг. 2001 г. |
31Наблюдать | CVE-2001-1106Proof of concept | The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwosambar · sambar server | Высокая7,5 | — | 2,3 % | 25 июл. 2001 г. |
31Наблюдать | CVE-1999-1523Эксплойта нет | Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, visambar · sambar server | Высокая7,5 | — | 2,3 % | 4 окт. 1999 г. |
28Наблюдать | CVE-2002-0737Proof of concept | Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resosambar · sambar server | Средняя6,4 | — | 8,9 % | 12 авг. 2002 г. |
23Наблюдать | CVE-2000-0213Proof of concept | The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shesambar · sambar server | Средняя5,0 | — | 9,9 % | 23 февр. 2000 г. |
23Наблюдать | CVE-2004-2565Proof of concept | Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administsambar · sambar server | Средняя5,0 | — | 9,3 % | 31 дек. 2004 г. |
22Наблюдать | CVE-2001-1010Proof of concept | Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary sambar · sambar server | Средняя5,0 | — | 7,0 % | 22 июл. 2001 г. |
21Наблюдать | CVE-2000-0835Proof of concept | search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the dsambar · sambar server | Средняя5,0 | — | 2,8 % | 14 нояб. 2000 г. |
20Наблюдать | CVE-1999-1178Эксплойта нет | Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl scripsambar · sambar server | Средняя5,0 | — | 1,4 % | 10 июн. 1998 г. |
20Наблюдать | CVE-2003-1284Эксплойта нет | Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) envirsambar · sambar server | Средняя5,0 | — | 1,3 % | 31 дек. 2003 г. |
18Наблюдать | CVE-2006-6624Proof of concept | The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) via a long series of sambar · sambar server | Средняя4,0 | — | 6,2 % | 18 дек. 2006 г. |
18Наблюдать | CVE-2004-2564Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remosambar · sambar server | Средняя4,3 | — | 4,7 % | 31 дек. 2004 г. |
18Наблюдать | CVE-2003-1285Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web scriptsambar · sambar server | Средняя4,3 | — | 1,8 % | 31 дек. 2003 г. |
18Наблюдать | CVE-2003-1287Эксплойта нет | Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name sucsambar · sambar server | Средняя4,6 | — | 0,4 % | 31 дек. 2003 г. |
17Наблюдать | CVE-2005-3506Эксплойта нет | Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to isambar · sambar server | Средняя4,3 | — | 1,2 % | 5 нояб. 2005 г. |
- CVE-2004-208643В плане
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of
СредняяCVSS 5,0Готовый эксплойтEPSS 75 %sambar · sambar server6 февр. 2004 г.
- CVE-2000-050941В плане
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %sambar · sambar server1 июн. 2000 г.
- CVE-2002-012833Наблюдать
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, vi
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %sambar · sambar server25 мар. 2002 г.
- CVE-2003-128631Наблюдать
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HT
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %sambar · sambar server31 дек. 2003 г.
- CVE-2001-129231Наблюдать
Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %sambar · sambar server13 авг. 2001 г.
- CVE-2001-110631Наблюдать
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwo
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %sambar · sambar server25 июл. 2001 г.
- CVE-1999-152331Наблюдать
Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %sambar · sambar server4 окт. 1999 г.
- CVE-2002-073728Наблюдать
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (reso
СредняяCVSS 6,4Proof of conceptEPSS 8 %sambar · sambar server12 авг. 2002 г.
- CVE-2000-021323Наблюдать
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via she
СредняяCVSS 5,0Proof of conceptEPSS 9 %sambar · sambar server23 февр. 2000 г.
- CVE-2004-256523Наблюдать
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administ
СредняяCVSS 5,0Proof of conceptEPSS 9 %sambar · sambar server31 дек. 2004 г.
- CVE-2001-101022Наблюдать
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary
СредняяCVSS 5,0Proof of conceptEPSS 7 %sambar · sambar server22 июл. 2001 г.
- CVE-2000-083521Наблюдать
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the d
СредняяCVSS 5,0Proof of conceptEPSS 2 %sambar · sambar server14 нояб. 2000 г.
- CVE-1999-117820Наблюдать
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl scrip
СредняяCVSS 5,0Эксплойта нетEPSS 1 %sambar · sambar server10 июн. 1998 г.
- CVE-2003-128420Наблюдать
Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) envir
СредняяCVSS 5,0Эксплойта нетEPSS 1 %sambar · sambar server31 дек. 2003 г.
- CVE-2006-662418Наблюдать
The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) via a long series of
СредняяCVSS 4,0Proof of conceptEPSS 6 %sambar · sambar server18 дек. 2006 г.
- CVE-2004-256418Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remo
СредняяCVSS 4,3Proof of conceptEPSS 4 %sambar · sambar server31 дек. 2004 г.
- CVE-2003-128518Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script
СредняяCVSS 4,3Эксплойта нетEPSS 1 %sambar · sambar server31 дек. 2003 г.
- CVE-2003-128718Наблюдать
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name suc
СредняяCVSS 4,6Эксплойта нетEPSS 0 %sambar · sambar server31 дек. 2003 г.
- CVE-2005-350617Наблюдать
Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to i
СредняяCVSS 4,3Эксплойта нетEPSS 1 %sambar · sambar server5 нояб. 2005 г.