1225 matches found
Apache Httpd < 2.2.12 : APR-util XML DoS
A denial of service flaw was found in the bundled copy of the APR-util library Extensible Markup Language XML parser. A remote attacker could create a specially-crafted XML document that would cause excessive memory consumption when processed by the XML decoding engine...
CVE-2009-0023: Improper Restriction of Operations within the Bounds of a Memory Buffer
The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...
[SECURITY] [DSA 1812-1] New apr-util packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1812-1 [email protected] http://www.debian.org/security/ Stefan Fritsch June 04, 2009 http://www.debian.org/security/faq -...
apr -- multiple vulnerabilities
Secunia reports: Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS Denial of Service. A vulnerability is caused due to an error in the processing of XML files and can be exploited to exhaust all available memory via ...
[SECURITY] [DSA 1812-1] New apr-util packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1812-1 [email protected] http://www.debian.org/security/ Stefan Fritsch June 04, 2009 http://www.debian.org/security/faq -...
DSA-1812-1 apr-util - several vulnerabilities
Bulletin has no description...
Mozilla Firefox Multiple Vulnerabilities Apr-09 (Windows)
The host is installed with Mozilla Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulnapr09win.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Vulnerabilities Apr-09 Windows Authors: Sharath S Copyright: Copyright c 2009...
Solaris 5.10 (x86) : 137180-12
Service Provisioning System 6.0x86: Master Server Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ...
Apache Httpd < 2.2.12 : APR-util off-by-one overflow
An off-by-one overflow flaw was found in the way the bundled copy of the APR-util library processed a variable list of arguments. An attacker could provide a specially-crafted string as input for the formatted output conversion routine, which could, on big-endian platforms, potentially lead to th...
Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities ======================================================== Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version:...
Solaris 9 (sparc) : 119010-01
VERITAS NetBackup 5.0 Product Patch MP6. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 5.9 (sparc) : 118950-38
Portal Server 6.3.1: Miscellaneous Fixes. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...
FreeBSD : apache -- apr_uri_parse IPv6 address handling vulnerability (762d1c6d-0722-11d9-b45d-000c41e2cdad)
The Apache Software Foundation Security Team discovered a programming error in the apr-util library function apruriparse. When parsing IPv6 literal addresses, it is possible that a length is incorrectly calculated to be negative, and this value is passed to memcpy. This may result in an exploitab...
Solaris 5.2 (sparc) : 102381-01
FLEXlm 4.0 jumbo patch. Date this patch was last updated by Sun : Apr/26/95 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
PHP-agenda <= 2.2.5 Remote File Overwriting
Salvatore "drosophila" Fresta + Application: PHP-agenda + Version: = 2.2.5 + Website: http://php-agenda.sourceforge.net + Bugs: A Remote File Overwriting + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact:...
Apache Httpd < 2.2.12 : APR-util heap underwrite
A heap-based underwrite flaw was found in the way the bundled copy of the APR-util library created compiled forms of particular search patterns. An attacker could formulate a specially-crafted search keyword, that would overwrite arbitrary heap memory locations when processed by the pattern...
GLSA-200804-10 : Tomcat: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200804-10 Tomcat: Multiple vulnerabilities The following vulnerabilities were reported: Delian Krustev discovered that the JULI logging component does not properly enforce access restrictions, allowing web application to add or...
hpopenview-multi.txt
Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...
HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities
HP OpenView Network Node Manager OV NNM 7.53 - Multiple Vulnerabilities Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physic...
HP OpenView NNM 7.53 Multiple Remote Vulnerabilities
Exploit for unknown platform in category dos / poc ==================================================== HP OpenView NNM 7.53 Multiple Remote Vulnerabilities ==================================================== Luigi Auriemma Application: HP OpenView Network Node Manager...