CVE-2011-0419: Allocation of Resources Without Limits or Throttling

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

CentOS 4 / 5 : apr (CESA-2011:0507)

Updated apr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

PT-2011-1007

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 1.3.x through 2.0.64 Apache HTTP Server versions 2.2.x through 2.2.19 Description The issue arises from the incorrect handling of HTTP requests with modified Range header content, leading to the device ceasing to...

PT-2011-2336

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime APR library versions prior to 1.4.3 Apache HTTP Server versions prior to 2.2.18 NetBSD version 5.1 OpenBSD version 4.8 FreeBSD affected versions not specified Apple Mac OS X version 10.6 Oracle Solaris version 10 Androi...

CVE-2011-1610

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

Sql injection

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

CVE-2011-1610

CVE-2011-1610 affects Cisco Unified Communications Manager (CUCM) where the embedded Apache HTTP Server exposes xmldirectorylist.jsp. The vulnerability arises from improper validation of parameters (f, l, n) passed to the JSP, enabling a remote, unauthenticated attacker to inject and execute arbi...

CVE-2011-1610: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

Apache HTTP Server mod_tcl Module Format String (CVE-2006-4154)

Apache HTTP server is the most widely deployed web server product on the Internet. Apache HTTP server is capable of running on many platforms, including Microsoft Windows and a wide variety of Unix-like platforms. The Apache HTTP server is very flexible and customizable in many aspects of its...

PT-2011-3253

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su2, 7.x through 7.15su3, 8.0 through 8.03asu1, and 8.5 through 8.50su0 Description The issue allows remote attackers to execute arbitrary SQL commands via the f, l, or n parameter ...

CentOS 5 : php53 (CESA-2011:0196)

Updated php53 packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS 5 : subversion (CESA-2011:0327)

Updated subversion packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2011:0327 Updated subversion packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring Syst...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2011:0257 Updated subversion packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Fedora Update for php FEDORA-2011-3636

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2011-3636 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Mandriva Linux Security Advisory : subversion (MDVSA-2011:067)

A vulnerability was discovered and corrected in subversion : The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request that contains a lock token...

[SECURITY] Fedora 13 Update: php-5.3.6-1.fc13

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Mandriva Update for apache MDVSA-2011:057 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2011:057 apache Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2011-1176

The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileg...

CVE-2011-1176

The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileg...