http-slowloris-check NSE Script

Tests a web server for vulnerability to the Slowloris DoS attack without actually launching a DoS attack. Slowloris was described at Defcon 17 by RSnake see . This script opens two connections to the server, each without the final CRLF. After 10 seconds, second connection sends additional header...

SuSE Update for apache2 openSUSE-SU-2012:0314-1 (apache2)

Check for the Version of apache2 OpenVAS Vulnerability Test $Id: gbsuse201203141.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for apache2 openSUSE-SU-2012:0314-1 apache2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Ricoh DC Software DL-10 FTP Server 'USER' Command Buffer Overflow Vulnerability

Ricoh DC Software DL-10 FTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6750

creationtimestamp| type| source ---|---|--- 2012-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18643...

CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the modreqtimeout module in versions before 2.2.15...

CVE-2007-6750

CVE-2007-6750 affects Apache HTTP Server 1.x and 2.x. The vulnerability arises from handling partial HTTP requests (Slowloris), related to absence of the mod_reqtimeout protection in versions before 2.2.15, enabling remote DoS (daemon outage). Public details in connected docs confirm PoCs/exploit...

Apache 2.2.x < 2.2.15 Multiple Vulnerabilities

According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.15. It is, therefore, potentially affected by multiple vulnerabilities : - A TLS renegotiation prefix injection attack is possible. CVE-2009-3555 - The 'modproxyajp' module returns the wrong status cod...

CVE-2008-6750

CVE-2008-6750 affects FlexPHPDirectory 0.0.1, where add.php allows unrestricted file uploads. An attacker can upload a file with an executable extension and then access it directly under photo/ to execute code remotely. The underlying issue is unrestricted upload handling in the web application, ...

CVE-2008-6750

creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7614...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...