Lucene search
AppleCVELIST:CVE-2016-4694HistorySep 25, 2016 - 10:00 a.m.
CVE-2016-4694
2016-09-2510:00:00
apple
www.cve.org
The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application’s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an “httpoxy” issue, a related issue to CVE-2016-5387.
Related
prion
prion
Design/Logic Flaw
2016-09-25 10:59:00
Design/Logic Flaw
2016-07-19 02:00:00
Design/Logic Flaw
2016-10-06 14:59:00
nvd
nvd
ubuntucve
ubuntucve
cve
cve
openvas
openvas
Debian Security Advisory DSA 3623-1 (apache2 - security update)
2016-07-20 00:00:00
Debian: Security Advisory (DSA-3623-1)
2016-07-19 00:00:00
Mageia: Security Advisory (MGASA-2017-0146)
2022-01-28 00:00:00
ibm
ibm
nessus
nessus
openSUSE Security Update : apache2 (openSUSE-2016-880) (httpoxy)
2016-07-20 00:00:00
RHEL 6 / 7 : JBoss Core Services (RHSA-2016:1851) (httpoxy)
2016-09-15 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : Apache HTTP Server vulnerability (USN-3038-1)
2016-07-19 00:00:00
oraclelinux
oraclelinux
httpd security and bug fix update
2016-07-18 00:00:00
httpd security update
2016-07-18 00:00:00
debian
debian
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
[SECURITY] [DLA 553-1] apache2 security update
2016-07-20 11:30:29
mageia
mageia
Updated apache packages fix security vulnerability
2016-07-27 00:16:28
Updated perl-CGI-Emulate-PSGI packages fix security vulnerability
2017-05-26 09:54:58
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2016-07-18 16:26:29
httpd, mod_ssl security update
2016-07-18 15:57:06
redhatcve
redhatcve
CVE-2016-5387
2016-07-18 14:19:04
CVE-2016-1000104
2016-07-18 14:49:14
httpd
httpd
Apache Httpd < 2.4.25 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
Apache Httpd < 2.2.32 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
redhat
redhat
(RHSA-2016:1422) Important: httpd security and bug fix update
2016-07-18 14:13:23
(RHSA-2016:1851) Important: Red Hat JBoss Core Services Apache HTTP 2.4.6 Service Pack 1 security update
2016-09-12 16:50:10
(RHSA-2016:1421) Important: httpd security update
2016-07-18 00:00:00
cvelist
cvelist
CVE-2016-5387
2016-07-19 01:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: perl-CGI-Emulate-PSGI-0.22-1.fc23
2016-08-09 00:02:40
[SECURITY] Fedora 24 Update: perl-CGI-Emulate-PSGI-0.22-1.fc24
2016-08-08 20:37:39
[SECURITY] Fedora 23 Update: httpd-2.4.23-4.fc23
2016-07-27 20:56:05
f5
f5
SOL80513384 - Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 00:00:00
Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 21:36:00
veracode
veracode
Open Redirection
2019-01-15 09:12:18
debiancve
debiancve
CVE-2016-5387
2016-07-19 02:00:19
osv
osv
CVE-2016-5387
2016-07-19 02:00:00
wordpress - security update
2016-07-29 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerability
2016-07-18 00:00:00
amazon
amazon
Important: httpd24, httpd
2016-07-20 18:00:00
alpinelinux
alpinelinux
CVE-2016-5387
2016-07-19 02:00:19
apple
apple
About the security content of macOS Server 5.2
2016-09-20 00:00:00
About the security content of macOS Server 5.2 - Apple Support
2017-01-23 05:30:00
About the security content of macOS Sierra 10.12 - Apple Support
2017-01-23 05:36:06
cloudfoundry
cloudfoundry
Multiple CVEs: httpoxy | Cloud Foundry
2016-12-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
slackware
slackware
[slackware-security] httpd
2016-12-24 01:35:08
freebsd
freebsd
Apache httpd -- several vulnerabilities
2016-12-20 00:00:00
cert
cert
checkpoint_advisories
checkpoint_advisories
threatpost
threatpost
CGI Script Vulnerability 'Httpoxy' Allows Man-in-the-Middle Attack
2016-07-18 18:00:46
Apple Squashes 68 Security Bugs With Sierra Release
2016-09-20 17:14:52
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-01-15 00:00:00
impervablog
impervablog
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
2020-05-27 09:22:21
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00