249 matches found
FreeBSD : Apache httpd -- Multiple vulnerabilities (25b78bdd-25b8-11ec-a341-d4c9ef517024)
The Apache http server project reports : - moderate: NULL pointer dereference in h2 fuzzing CVE-2021-41524 - important: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
Apache Httpd < 2.4.51 : Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...
Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Date: 10/05/2021 Exploit Author: Lucas Souza https://lsass.io Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE : CVE-2021-41773 Credits: Ash Daulton and the cPanel Security Team...
Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)
A directory traversal vulnerability exists in Apache HTTP Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Path traversal and file disclosure vulnerabilit...
Exploit for Path Traversal in Apache Http_Server
POC CVE-2021-41773 !N|Solidhttps://tpx.mx/0xFiles/fil...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Exploitation of CVE-202...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Exploitation of CVE-202...
Apache Web Server Zero-Day Actively Exploited, Exposes Sensitive Data
Apache Software has quickly issued a fix for a zero-day security bug in the Apache HTTP Server, which was first reported to the project last week. The vulnerability is under active exploitation in the wild, it said, and could allow attackers to access sensitive information. According to a securit...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 PoC Proof of concept to check if hosts are vul...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Proof of Concept Quick and dirty proof of conce...
Exploit for Path Traversal in Apache Http_Server
cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in...
CVE-2021-41773
creationtimestamp| type| source ---|---|--- 2021-10-05 14:37:33+00:00| published-proof-of-concept| https://t.me/cKure/7469 2021-10-05 15:14:23+00:00| seen| https://t.me/ptswarm/79 2021-10-05 15:39:32+00:00| published-proof-of-concept|...
CVE-2021-41773
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...
CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...
CVE-2021-41773
CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49 affecting how path normalization maps URLs to files under Alias-like directives. The issue could allow access to files outside configured directories; if CGI scripts are enabled for those paths, remote code execution is...
Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities
The version of Apache httpd installed on the remote host is 2.4.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.50 advisory. - While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external...
Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Windows
Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Apache httpd -- Multiple vulnerabilities
The Apache http server project reports: moderate: null pointer dereference in h2 fuzzing CVE-2021-41524 important: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773...