51 matches found
Apache HTTP Server 'mod_proxy_fcgi' Denial of Service Vulnerability (May 2015)
Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache HTTP Server Denial of Service Vulnerability (CNVD-2015-01691)
Apache HTTP Server is an open source web server from the Apache Software Foundation that runs on most computer operating systems and is widely used as one of the most popular web server-side software due to its multi-platform and security. A denial-of-service vulnerability exists in Apache HTTP...
Code injection
The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function...
Apache HTTP Server 2.4 < 2.4.12 DoS
Binary data 8937.prm...
Apache Httpd < 2.4.16 : Crash in ErrorDocument 400 handling
A crash in ErrorDocument handling was found. If ErrorDocument 400 was configured pointing to a local URL-path with the INCLUDES filter active, a NULL dereference would occur when handling the error, causing the child process to crash. This issue affected the 2.4.12 release only...
Apache Httpd < 2.4.12 : HTTP Trailers processing bypass
HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. This fix adds the "MergeTrailers" directive to restore legacy behavior...
Fedora 15 : cyrus-imapd-2.4.12-1.fc15 (2011-13860)
security fix : - fixes incomplete authentication checks in nntpd Secunia SA46093 - other fixed bugs : - delayed delete can fail because of invalid names - cyradm cannot wildcard delete ACLs from a mailbox - Wrong ENABLE result doubled names - mbpath output changed from 2.3 to 2.4 for remote...
Secunia Research: Cyrus IMAPd NTTP Authentication Bypass Vulnerability
====================================================================== Secunia Research 05/10/2011 - Cyrus IMAPd NTTP Authentication Bypass Vulnerability - ====================================================================== Table of Contents Affected...
Security fix for the ALT Linux 8 package cyrus-imapd version 2.4.12-alt1
Oct. 6, 2011 Vladimir V Kamarzin 2.4.12-alt1 - 2.4.12 fixes CVE-2011-3372, authentication bypass in the nntpd daemon...