164 matches found
CentOS 3 / 4 / 5 : mod_perl (CESA-2007:0395)
Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter into the Apache web server, so that the Apache web...
mod_perl security update
CentOS Errata and Security Advisory CESA-2007:0395 Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter int...
Low: Red Hat Security Advisory: mod_perl security update
Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter into the Apache web server, so that the Apache web...
Low: mod_perl security update
1.9916-4.5 - avoid backup files in install root 241643 1.9916-4.3 - fix XS generation of methodislimited 242430 1.9916-4.2 - rebuild 1.9916-4.1 - add security fix for CVE-2007-1349 241643...
Fedora Core 6 : mod_perl-2.0.2-6.2.fc6 (2007-577)
This update fixes a security issue in modperl. An issue was found in the 'namespacefromuri' method of the ModPerl::RegistryCooker class. If a server implemented a modperl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which...
Fedora Core 5 : mod_perl-2.0.2-5.2.fc5 (2007-576)
This update fixes a security issue in modperl. An issue was found in the 'namespacefromuri' method of the ModPerl::RegistryCooker class. If a server implemented a modperl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which...
Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2007:083)
PerlRun.pm in Apache modperl 1.30 and earlier, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI. Updated packages have been patched to corre...
CVE-2007-1349
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
CVE-2007-1349
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
CVE-2007-1349
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
CVE-2007-1349
CVE-2007-1349 is referenced in connected documents as affecting Solaris/SunOS patches for Apache 1.3 on SPARC/x86 (patches 122911-32 through 122911-37). The initial description attributes the flaw to PerlRun.pm in Apache mod_perl 1.30 and RegistryCooker.pm in mod_perl 2.x, which fail to properly ...
CVE-2006-1349
CVE-2006-1349 describes multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2. An affected component is the Musicbox web interface (index.php and cart.php) where user-supplied input in parameters (1) id, (2) type, (3) show, and (4) message1 can be injected as script/HTML. The...
[SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 727-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...
CVE-2005-1349
CVE-2005-1349 affects the Perl Convert::UUlib (Convert-UUlib) library. A buffer overflow in the library’s handling of read parameters allows remote attackers to execute arbitrary code. Affected version range is prior to 1.051; upgrading to 1.051 fixes the issue (as cited by multiple advisories an...
CVE-2004-1349
CVE-2004-1349 affects gzip releases 1.3 and earlier on Solaris 8. The vulnerability occurs when gzip is invoked with the -f or -force flags, causing it to alter permissions of files that are hard linked to the target, enabling local users to view or modify those linked files. Connected sources co...
CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files...
CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files...
CVE-2002-1349
Summary: CVE-2002-1349 describes a local buffer overflow in Trend Micro PC-cillin’s pop3trap.exe, affecting PC-cillin 2000, 2002, and 2003. The vulnerability arises from a long input string to TCP port 110 (POP3) in the local POP3 proxy, allowing a local attacker to execute arbitrary code with th...
