Updated apache-mod_security packages fix security vulnerability

Updated apache-modsecurity packages fix security vulnerability: Martin Holst Swende discovered a flaw in the way modsecurity handled chunked requests. A remote attacker could use this flaw to bypass intended modsecurity restrictions, allowing them to send requests containing content that should...

CVE-2013-5705

apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header...

CVE-2013-5705

Affected software: ModSecurity (Apache module) before 2.7.6. Root cause: flawed handling of chunked Transfer-Encoding with a capitalized Chunked value in the HTTP header. Impact: remote attackers can bypass mod_security rules. Remediation: upgrade to ModSecurity 2.7.6 or newer (as cited by multip...

Fedora 19 : mod_security-2.7.5-3.fc19 (2014-4720)

Fix Chunked string case sensitive issue CVE-2013-5705, RHBZ 1082904 1082905 1082906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for mod_security FEDORA-2014-4633

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mod_security FEDORA-2014-4720

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : mod_security-2.7.5-3.fc20 (2014-4633)

Fix Chunked string case sensitive issue CVE-2013-5705, RHBZ 1082904 1082905 1082906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

ModSecurity HTTP请求分块编码安全限制绕过漏洞

CVE ID:CVE-2013-5705 ModSecurity是一个入侵侦测与防护引擎,它主要是用于Web应用程序,所以也被称为Web应用程序防火墙。 ModSecurity 2.7.6之前版本在"modsecuritytxinit"函数apache2/modsecurity.c的实现中存在错误，恶意用户通过分块编码的特制请求，利用此漏洞可绕过HTTP请求主体处理。 0 modsecurity modsecurity 2.7.6 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://sourceforge.net/projects/mod-security/...

CVE-2012-5705

CVE-2012-5705 concerns the Hotblocks Drupal contributed module (6.x-1.x prior to 6.x-1.8). The vulnerability is an XSS in the settings page (admin/settings/hotblocks) caused by insufficient sanitization of the block names input, allowing remote authenticated users with the administer hotblocks pe...

SA-CONTRIB-2012-126 - Hotblocks - Cross Site Scripting (XSS) and Denial of Service (DoS)

The Hotblocks module provides an enhanced GUI for administering blocks and block content that is intended to be simpler and more controllable for less privileged users than the default block administration tools. Cross Site Scripting XSS The module doesn't sufficiently sanitize the user input for...

FreeBSD Ports: verlihub

The remote host is missing an update to the system as announced in the referenced advisory. VID 58997463-e012-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 58997463-e012-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-5705

CVE-2008-5705 affects Verlihub 0.9.8d-RC2 and earlier. The cTrigger::DoIt() code path passes user input to a shell command, appends shell metacharacters, and uses system(), enabling remote command execution when triggers are enabled. There is also evidence of a local file/temporary file handling ...

Gentoo Security Advisory GLSA 200611-10 (wordpress)

The remote host is missing updates announced in advisory GLSA 200611-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-10 (wordpress)

The remote host is missing updates announced in advisory GLSA 200611-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5705

Technical details about CVE-2007-5705 are not publicly available in the provided connected documents; the entry notes remote code execution via settings.inc.php in Jeebles Directory 2.9.60. Monitor for updates.

CVE-2006-5705

CVE-2006-5705 affects WordPress via the wp-db-backup.php plugin. A directory traversal flaw in the backup and fragment GET parameters allows remote authenticated users to read or overwrite arbitrary files. Impact is limited to affected WordPress installations prior to 2.0.5; exploitation requires...