Fedora 18 : mod_fcgid-2.3.9-1.fc18 (2013-18686)

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue CVE-2013-4365. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

CVE-2013-4365

Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2013-4365

The vulnerability CVE-2013-4365 affects Apache HTTP Server’s mod_fcgid module. A heap-based buffer overflow in fcgid_header_bucket_read (fcgid_bucket.c) prior to version 2.3.9 could allow remote attackers to cause an impact via unspecified vectors. Affected product/version: mod_fcgid before 2.3.9...

CVE-2013-4365

Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2013-4365

Heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c in the modfcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors...

Updated apache-mod_fcgid packages fix CVE-2013-4365

Updated apache-modfcgid package fixes security vulnerability: Apache modfcgid before version 2.3.9 fails to perform adequate boundary checks on user-supplied input. This may allow a remote attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the...

Fedora 20 : mod_fcgid-2.3.9-1.fc20 (2013-18579)

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue CVE-2013-4365. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

CVE-2010-4365

CVE-2010-4365 concerns an SQL injection in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar). The vulnerability stems from unsafely handling the event_id parameter in the alleventlist_more action to index.php, allowing remote attackers to craft input that could modify or disc...

CVE-2009-4365

creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10461 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10458...

CVE-2008-4365

CVE-2008-4365 describes a cross-site scripting (XSS) vulnerability in the search.php of Siteman 1.1.11 and earlier . The affected component is the search.php implementation, with the underlying cause described as an XSS vulnerability; the vectors are listed as unknown. The practical impact is tha...

CVE-2007-4365

CVE-2007-4365 is an XSS vulnerability affecting eXV2 CMS 2.0.5 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via a set_lang cookie to an unspecified component. Connected records also reference CVE-2007-1965 as a possible overlap. The available documents confirm the...

CVE-2005-4365

CVE-2005-4365 describes multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029. An attacker can inject arbitrary web script or HTML via the name parameter in text.php and the frame parameter in forum.php. This document set confirms the affected product and the vulnerable parameter...