CVE-2008-1862

ExBB Italia 0.22 and earlier only checks GET requests that use the QUERYSTRING for certain path manipulations, which allows remote attackers to bypass this check via 1 POST or 2 COOKIE variables, a different vector than CVE-2006-4488. NOTE: this can be leveraged to conduct PHP remote file inclusi...

CVE-2008-1862

ExBB Italia 0.22 and earlier are affected by PHP remote file inclusion vulnerabilities. The CVE-2008-1862 family describes checks on GET requests via QUERY_STRING that can be bypassed using POST or COOKIE variables, enabling RFI through URLs in the exbb[home_path] or new_exbb[home_path] parameter...

Fedora 7 : httpd-2.2.4-4.1.fc7 (2007-0704)

The Apache HTTP Server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the Apache HTTP Server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of...

Security fix for the ALT Linux 9 package apache2 version 2.2.5-alt1

Aug. 18, 2007 Aleksey Avdeev 2.2.5-alt1 - 2.2.5 - Adding SECURITY to upstream old patchs removing: + CVE-2007-3847 + CVE-2007-1863 remove apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 remove apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch + CVE-2006-5752 remove...

Security fix for the ALT Linux 10 package apache2 version 2.2.5-alt1

Aug. 18, 2007 Aleksey Avdeev 2.2.5-alt1 - 2.2.5 - Adding SECURITY to upstream old patchs removing: + CVE-2007-3847 + CVE-2007-1863 remove apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 remove apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch + CVE-2006-5752 remove...

Security fix for the ALT Linux 8 package apache2 version 2.2.5-alt1

Aug. 18, 2007 Aleksey Avdeev 2.2.5-alt1 - 2.2.5 - Adding SECURITY to upstream old patchs removing: + CVE-2007-3847 + CVE-2007-1863 remove apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 remove apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch + CVE-2006-5752 remove...

[ MDKSA-2007:127 ] - Updated apache packages fix mod_mem_cache issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:127 http://www.mandriva.com/security/ Package : apache Date : June 19, 2007 Affected: 2007.1 Problem Description: The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels o...

Security fix for the ALT Linux 10 package apache2 version 2.2.4-alt26

June 14, 2007 Aleksey Avdeev 2.2.4-alt26 - Fix CVE-2007-1862 see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 + use apache2-2.2.4-asc-fix-CVE-2007-1862-0.1.patch + add Requires libapr1-devel = 1.2.8-alt1.2...

Security fix for the ALT Linux 7 package apr1 version 1.2.8-alt1.2

June 14, 2007 Aleksey Avdeev 1.2.8-alt1.2 - NMU: + adding apr-1.2.8-asf-aprtableclone.patch: add table copy clone function for apr, for CVE-2007-1862 fix see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 and &LThttp://issues.apache.org/bugzilla/attachment.cgi?id=20150...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt26

June 14, 2007 Aleksey Avdeev 2.2.4-alt26 - Fix CVE-2007-1862 see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 + use apache2-2.2.4-asc-fix-CVE-2007-1862-0.1.patch + add Requires libapr1-devel = 1.2.8-alt1.2...

Security fix for the ALT Linux 8 package apache2 version 2.2.4-alt26

June 14, 2007 Aleksey Avdeev 2.2.4-alt26 - Fix CVE-2007-1862 see &LThttp://issues.apache.org/bugzilla/showbug.cgi?id=41551 + use apache2-2.2.4-asc-fix-CVE-2007-1862-0.1.patch + add Requires libapr1-devel = 1.2.8-alt1.2...

BELL-CVE-2007-1862 CVE-2007-1862 does not affect BellSoft software

Bulletin has no description...

CVE-2007-1862

The CVE-2007-1862 issue affects Apache 2.2.4’s mod_mem_cache recall_headers, where not all header levels are copied, potentially causing HTTP responses to include previously used data. This could lead to information disclosure to remote attackers. Connected advisories confirm affected packages an...

CVE-2006-1862

The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service panic by running lsof a large number of times in a way that produces a heavy system load...

CVE-2006-1862

The CVE-2006-1862 vulnerability affects the Linux kernel 2.6.x virtual memory implementation. It enables a local user to cause a denial of service (panic) by repeatedly running lsof, which can generate a heavy system load. Related advisories (RHSA-2006:0493 / CESA-2006:0493) document this issue a...

CVE-2002-1862

CVE-2002-1862 affects SmartMail Server 2.0. A remote attacker can trigger a denial-of-service (crash) by sending data and closing the connection before all data is transmitted. The description confirms the vulnerability mechanism but does not provide concrete remediation steps, affected versions ...

CVE-2004-1862

CVE-2004-1862 concerns multiple reflected XSS flaws in Extreme Messageboard (XMB) versions 1.8 SP3 and 1.9 beta. The vulnerabilities arise from unsafely echoed user-controlled input across several scripts: xmb.php (xmbuser), u2u.php (folder), stats.php (viewmost, replymost, latest), post.php (mes...

CVE-2002-1862

SmartMail Server 2.0 allows remote attackers to cause a denial of service crash by sending data and closing the connection before all the data has been sent...