[SECURITY] [DSA 2405-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2405-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 06, 2012 http://www.debian.org/security/faq -...

Subversion "mod_dav_svn"多个拒绝服务和信息泄露漏洞

BUGTRAQ ID: 48091 CVE ID: CVE-2011-1752,CVE-2011-1783,CVE-2011-1921,CVE-2011-1921 Subversion是一个自由，开源的版本控制系统。 Subversion在moddavsvn的实现上存在多个拒绝服务和信息泄露漏洞，远程攻击者可利用这些漏洞使应用程序崩溃，消耗掉所有内存资源或获取敏感信息。 Subversion的moddavsvn Apache HTTPD服务器模块在某些情境中会进入不存在的且每次重复都分配内存的逻辑循环，最终消耗服务器上的所有内存。 Apache Group Subversion 1.x...

subversion: security udpate (important)

Subversion was updated to version 1.6.17 to fix several security issues: - CVE-2011-1752: The moddavsvn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The moddavsvn Apache HTTPD server module can trigger a loop which consumes al...

[SECURITY] [DSA 2251-1] subversion security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2251-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2011 http://www.debian.org/security/faq -...

Apache Httpd < 1.3.33 : mod_include overflow

A buffer overflow in modinclude could allow a local user who is authorised to create server side include SSI files to gain the privileges of a httpd child...