An

8 CVEs across 2 An products. Browse An vulnerabilities, severities, and proof-of-concept exploits.

An products with known CVEs

ProductCVEs
An-Httpd5
An-Http3
An CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2006-15982006-04-03AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) sp…
CVE-2005-10862005-05-02Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent…
CVE-2005-10872005-04-07CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly re…
CVE-2003-12712003-12-31Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing t…
CVE-2003-12702003-12-31AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cgi with a long argument, possibly triggering a buf…
CVE-2003-12692003-12-31AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error…
CVE-2002-19302002-12-31Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
CVE-1999-09471999-11-02AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacter…