CVE-2004-0786

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...

CVE-2004-0809

The moddav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service child process crash via a certain sequence of LOCK requests for a location that allows WebDAV authoring access...

CVE-2004-0809

The moddav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service child process crash via a certain sequence of LOCK requests for a location that allows WebDAV authoring access...

Apache mod_ssl 2.0.x - Remote Denial of Service

Apache modssl 2.0.x - Remote Denial of Service source: https://www.securityfocus.com/bid/11154/info Apache 2.x modssl is reported prone to a remote denial of service vulnerability. This issue likely exists because the application fails to handle exceptional conditions. The vulnerability originate...

CVE-2004-0263

PHP 4.3.4 and earlier in Apache 1.x and 2.x modphp can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information...

Linux kernel in/out ports access

Mask for input/output permissions is not cleared for child process. It may lead to unauthorized access to i/o ports...

CVE-2002-1593

moddav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service CPU consumption in a preforked multi-processing module...

pipe problems in xinetd

Child process can access pipe descriptior used for internal signal handling...

CVE-2002-0767

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges...

Another flaw in Apache?

Hello. While playing with the SetEnv directive with Apache, I noticed that httpd processes are dying with a signal 11 if the data stored in an environment variable was too long. I simply triggered the bug by creating a .htaccess file so a regular user can do it with : SetEnv DATELOCALE "..." The...