6 matches found
Astra Linux – Vulnerability in Apache2
There is a cross-site scripting vulnerability in the HTML directory list generation of modproxyftp in Apache HTTP Server 2.4.67 and earlier, when listing FTP directory contents through either forward or reverse proxy configurations. Users are recommended to upgrade to version 2.4.68, which fixes...
EUVD-2026-35088
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
CVE-2026-44186
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the modproxyftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
EUVD-2008-0018
Malware in sbrugna...
Apache mod_proxy_ftp模块Null指针拒绝服务漏洞
Bugraq ID: 36260 Apache modproxyftp是一款用于处理FTP代理请求的Apache模块。 当处理FTP服务器的应答时modproxyftp存在错误,可导致Null指针应用而造成一个用程序崩溃。 使用./configure –enable-proxy –enable-proxy-ftp启用代理支持,并在httpd.conf文件中设置‘ProxyRequests’选项,如下代码的漏洞可导致应用程序崩溃: modules/proxy/proxyftp.c: int approxyftphandlerrequestrec r, proxyserverconf con...
Apache mod_proxy_ftp远程命令注入漏洞
Bugraq ID: 36254 Apache modproxyftp是一款用于处理FTP代理请求的Apache模块。 Apache modproxyftp不正确过滤用户输入数据,远程攻击者可以利用漏洞以应用程序安全上下文执行任意命令。 Intevydis公司发布的商业漏洞利用工具已经提供相关的攻击信息。目前没有详细漏洞细节提供。 Apache Software Foundation modproxyftp 厂商解决方案: 目前没有解决方案提供: http://httpd.apache.org/docs/2.0/mod/modproxyftp.html...