78 matches found
[SECURITY] [DSA 2579-1] apache2 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2579-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 30, 2012 http://www.debian.org/security/faq -...
CVE-2012-4557
The modproxyajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service worker consumption via an expensive request...
BELL-CVE-2012-4557 CVE-2012-4557 does not affect BellSoft software
Bulletin has no description...
CVE-2012-4557
CVE-2012-4557 affects the Apache HTTP Server, specifically the mod_proxy_ajp module in versions 2.2.12–2.2.21. The vulnerability causes a worker node to enter an error state when a long request-processing time is detected, enabling remote attackers to trigger a denial of service via an expensive ...
CVE-2012-4557
The modproxyajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service worker consumption via an expensive request...
[SECURITY] [DSA 2579-1] apache2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2579-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 30, 2012 http://www.debian.org/security/faq -...
CVE-2010-4557
CVE-2010-4557 describes a buffer overflow in the lm_tcp service of Wonderware InBatch 8.1/9.0 (used in Invensys Foxboro I/A Series Batch 8.1 and potentially other products). A crafted request to TCP port 9001 could cause a denial of service and potentially allow arbitrary code execution. Affected...
CVE-2009-4557
Cross-site scripting XSS vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, t...
CVE-2009-4557
The CVE-2009-4557 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal Image Assist module. Affected releases are: 5.x-1.x before 5.x-1.8; 5.x-2.x before 2.0-alpha4; 6.x-1.x before 6.x-1.1; 6.x-2.x before 2.0-alpha4; and 6.x-3.x-dev before 2009-07-15. The issue allows remote au...
CVE-2009-4557
Cross-site scripting XSS vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, t...
CVE-2008-4557
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 aka Strawberry allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression...
Immunity Canvas: CUTENEWS_EXEC
Name| cutenewsexec ---|--- CVE| CVE-2008-4557 Exploit Pack| CANVAS Description| cutenews/stawberry Remote Code Execution Notes| CVE Name: CVE-2008-4557 VENDOR: cutenews.ru Repeatability: Infinite References: http://securityreason.pl/exploitalert/3138 CVE Url:...
CVE-2008-4557
CVE-2008-4557 affects CuteNews.ru (Strawberry) 1.1.1, where plugins/wacko/highlight/html.php allows remote attackers to execute arbitrary PHP code by supplying a text parameter that is inserted into an executable regular expression. This is a remote code execution vulnerability; impact is complet...
CVE-2007-4557
CVE-2007-4557 is an XSS vulnerability in the Novell GroupWise 6.5 WebAccess webacc servlet. The issue allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, demonstrated by a URL within a STYLE element. The description notes this may be due to an incomplete fix ...
CVE-2006-4557
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis...
CVE-2006-4557
CVE-2006-4557 affects Bob Jewell Discloser 0.0.4, specifically the plugins/plugins.php file. The vulnerability allows remote code execution via a URL in the type parameter, with ongoing dispute about whether the attacker can actually control type. The CVE notes partial/conditional impact and that...
CVE-2005-4557
CVE-2005-4557 affects IceWarp Web Mail 5.5.1 (as used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). The issue is a remote inclusion vulnerability: an attacker can cause the system to include arbitrary local files via a null byte (%00) in the lang parameter, likely due to a ...