99 matches found
openSUSE Security Update : lighttpd (lighttpd-309)
Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-309. The...
Fedora Core 9 FEDORA-2008-11923 (lighttpd)
The remote host is missing an update to lighttpd announced via advisory FEDORA-2008-11923. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Gentoo Security Advisory GLSA 200812-04 (lighttpd)
The remote host is missing updates announced in advisory GLSA 200812-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200812-04 (lighttpd)
The remote host is missing updates announced in advisory GLSA 200812-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE 10 Security Update : lighttpd (lighttpd-5785)
Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5785. Th...
Lighttpd 'mod_userdir'大小写区分对比安全绕过漏洞
BUGTRAQ ID: 31600 CVE ID：CVE-2008-4360 CNCVE ID：CNCVE-20084360 Lighttpd是一款开放源代码的WEB服务器程序。 Lighttpd 'moduserdir'模块存在安全绕过问题，远程攻击者可以利用漏洞绕过部分安全限制，获得敏感信息。 lighttpd...
[SECURITY] [DSA-1645-1] New lighttpd packages fix various problems
------------------------------------------------------------------------ Debian Security Advisory DSA-1645-1 [email protected] http://www.debian.org/security/ Steve Kemp October 06, 2008 http://www.debian.org/security/faq -...
CVE-2008-4360
moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...
CVE-2008-4360
moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...
CVE-2008-4360
Vulnerability summary (CVE-2008-4360) Lighttpd
FreeBSD Ports: lighttpd
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MicroTik Router Version Detection
Binary data 4360.prm...
CVE-2007-4360
CVE-2007-4360 affects Dell DRAC4: firmware 1.50 (Build 02.16) allows remote attackers to cause a denial of service by targeting the SSH daemon with certain network traffic (demonstrated via nmap scans). The issue is described in vendor/security advisories as a remote DoS against the Mocana SSH im...
MS07-041: Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)
The remote host has a version of IIS that is vulnerable to a remote flaw that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2006-4360
Cross-site scripting XSS vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 20060812 allows remote authenticated users with the "create products" permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4360
The CVE-2006-4360 entry concerns the Drupal-based E-commerce 4.7 module vulnerability: before file.module 1.37.2.4 (20060812), remote authenticated users with the "create products" permission can inject arbitrary web script or HTML via unspecified vectors. The affected software is E-commerce 4.7 ...
CVE-2005-4360
The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...
CVE-2005-4360
Summary (CVE-2005-4360, mode C) : IIS 5.1 on Windows XP Pro SP2 contains a memory/URL parsing vulnerability in the IIS WWW component. A remote attacker can trigger it by sending specially crafted URLs (notably using paths like /_vti_bin/.dll/*/~0), leading to remote code execution with SYSTEM pri...
