1225 matches found
Server side request forgery (ssrf)
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to...
CVE-2007-6286: Undefined Security Weakness
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to...
Apache Tomcat 6.0.x < 6.0.16 Information Disclosure
Binary data 4368.pasl...
Moderate: httpd security update
2.0.46-70.ent.0.1 - use oracle index page oracleindex.html and logo removal - add apr-configure.patch 2.0.46-70.ent - add security fix for CVE-2007-6388 427235 - add security fix for modproxyftp UTF-7 XSS 427742 2.0.46-69.ent - add security fix for CVE-2007-3847 250759 - add security fixes for...
Security fix for the ALT Linux 7 package apr1 version 1.2.8-alt1.2
June 14, 2007 Aleksey Avdeev 1.2.8-alt1.2 - NMU: + adding apr-1.2.8-asf-aprtableclone.patch: add table copy clone function for apr, for CVE-2007-1862 fix see <http://issues.apache.org/bugzilla/showbug.cgi?id=41551 and <http://issues.apache.org/bugzilla/attachment.cgi?id=20150...
MyDNS 1.1.0 Remote Heap Overflow PoC
No description provided by source. / mydns-rr-smash.c Copyright c 2007 by [email protected] mydns remote exploit PoC x86-lnx by mu-b - Apr 2007 - Tested on: mydns-1.1.0 .tar.gz This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...
Solaris 9 (sparc) : 114690-01
GNOME 2.0.0: Print Patch for Solaris 9. Date this patch was last updated by Sun : Apr/01/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
OpenTTD 0.4.7 - Multiple Vulnerabilities
OpenTTD 0.4.7 - Multiple Vulnerabilities Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote,...
Solaris 9 (sparc) : 118666-86
JavaSE 5.0: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 8 (sparc) : 118667-86
JavaSE 5.0: update 85 patch equivalent to JDK 5.0u85, 64bit. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 8 (x86) : 118668-86
JavaSE 5.0x86: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
DEBIAN-CVE-2004-0786
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...
CVE-2004-0786
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...
CVE-2004-0786
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...
CVE-2004-0786
CVE-2004-0786 concerns a vulnerability in the apr-util IPv6 URI parsing (apr_uri_parse) used by Apache 2.x (APR library) prior to 2.0.50. A crafted IPv6 URL can trigger a denial-of-service in the httpd child process, with remote code execution possible under certain configurations or platforms. A...
Fedora Core 2 : apr-util-0.9.4-14.2 (2004-308)
Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an input validation issue in the IPv6 URI parsing routines in the apr-util library. If a remote attacker sent a request including a carefully crafted URI, an httpd child...
Fedora Core 1 : apr-util-0.9.4-2.1 (2004-307)
Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an input validation issue in the IPv6 URI parsing routines in the apr-util library. If a remote attacker sent a request including a carefully crafted URI, an httpd child...
CVE-2004-0786: Undefined Security Weakness
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...
Multiple Apache bugs
moddav DoS, local buffer overflows during config files parsing, potential buffer overflows in apr-util library...
PT-2004-1858 · Apache · Apache +2
Name of the Vulnerable Software and Affected Versions: Apache versions prior to 2.0.51 Description: The issue is related to the IPv6 URI parsing routines in the apr-util library, which can be exploited by remote attackers to cause a denial of service, specifically a child process crash, by sendin...