197 matches found
CVE-2010-2068
modproxyhttp.c in modproxyhttp in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive...
CVE-2010-2068
modproxyhttp.c in modproxyhttp in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive...
CVE-2010-2068
CVE-2010-2068 affects Apache HTTP ServerAffected: mod_proxy_http.c in Apache HTTP Server 2.2.9–2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, OS/2 in certain proxy worker pool configurations.Root cause: timeout handling in mod_proxy_http did not correctly detect timeouts, allowing a re...
[advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068
Vulnerability; httpd Timeout detection flaw modproxyhttp CVE-2010-2068 Classification; important Description; A timeout detection flaw in the httpd modproxyhttp module causes proxied response to be sent as the response to a different request, and potentially served to a different client, from the...
CVE-2009-2068
The CVE-2009-2068 entry relates to Google Chrome and describes a vulnerability where http content can be executed in the context of an https page when the top-level frame is https. Specifically, an attacker could modify an http page to include an https iframe that references a script on an http s...
CVE-2008-2068
This CVE concerns WordPress 2.5, where a Cross-site Scripting (XSS) vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue affects WordPress 2.5’s handling of input/output in a way that can compromise user sessions or content integrity. The primar...
CVE-2008-2068
Cross-site scripting XSS vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-2068
CVE-2007-2068 describes multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery. An attacker can supply a URL in the GALLERY_BASEDIR parameter to either mods/business_functions.php or mods/ui_functions.php, enabling remote code execution on the affected system. The d...
CVE-2006-2068
Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service application stop or fail via unexpected requests or data...
CVE-2006-2068
Hitachi JP1 products are affected by CVE-2006-2068. The issue is a denial-of-service condition triggered by handling unexpected requests or data, allowing remote attackers to cause the application to stop or fail. The available documents describe the vulnerability at a high level (DoS via abnorma...
CVE-2005-2068
CVE-2005-2068 affects the FreeBSD TCP stack (4.x up to 4.11 and 5.x up to 5.4). The issue allows a remote attacker to modify certain TCP options by sending a TCP segment with the SYN flag for an already established connection, leading to a potential denial of service by stalling the TCP connectio...
FreeBSD Security Advisory FreeBSD-SA-05:15.tcp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:15.tcp Security Advisory The FreeBSD Project Topic: TCP connection stall denial of service Category: core Module: inet Announced: 2005-06-29 Credits: Noritoshi...
FreeBSD-SA-05:15.tcp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:15.tcp Security Advisory The FreeBSD Project Topic: TCP connection stall denial of service Category: core Module: inet Announced: 2005-06-29 Credits: Noritoshi...
CVE-2004-2068
Vulnerability summary (CVE-2004-2068) : The leafnode NNTP server’s fetchnews program (versions 1.9.47 and earlier) can be induced to hang a process by processing an empty NNTP news article with missing mandatory headers, enabling a remote DoS. Real-world references in the connected documents indi...
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...