3233 matches found
Apache Traffic Server (ATS) Multiple Vulnerabilities
Apache Traffic Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:trafficserver"...
Code injection
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
DEBIAN-CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
UBUNTU-CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
CVE-2017-5659 affects Apache Traffic Server prior to 6.2.1. The vulnerability triggers a coredump when there is a mismatch between content length and chunked encoding. Impact in sources notes crash/denial of service-like behavior (availability impact) with a potential high consequence. The docume...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
CVE-2017-5659
Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding...
PT-2017-16652
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions prior to 6.2.1 Description The issue arises when there is a mismatch between content length and chunked encoding, causing the software to generate a coredump. Recommendations For versions prior to 6.2.1, update t...
Strust2 S2-046 remote code execution vulnerability two trigger point analysis-vulnerability warning-the black bar safety net
S2-046 vulnerability and S2-045 vulnerability is very similar, are by the error message into the buildErrorMessage this method caused. But this time there are two trigger points. Content-Length the length of value exceeds length Content-Disposition the filename there is an empty byte 0x01...
S2-046: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
It is possible to perform a RCE attack with a malicious Content-Disposition value or with improper Content-Length header. If the Content-Dispostion / Content-Length value is not valid an exception is thrown which is then used to display an error message to a user. This is a different vector for t...
Gratipay: Content-Length restriction bypass to heap overflow in gip.rocks.
I started playing around with a0xnirudh's Content-Length restriction bypass and noticed that when combined with a different vulnerability this could be leveraged to do a bit more than DoS. We decided to open a new ticket to address this issue, since we were already aware of the bypass. a0xnirudh...
Microsoft Edge Fetch API allows setting of arbitrary request headers (CVE-2017-0140)
Introduction The Fetch API provides an interface for fetching resources including across the network. It will seem familiar to anyone who has used XMLHttpRequest, but the Fetch API provides a more powerful and flexible feature set. Starting in EdgeHTML 14, which ships with Windows 10 Anniversary...
Microsoft Edge Fetch API Arbitrary Header Setting Vulnerability
Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Microsoft Edge Fetch API allows setting of arbitrary request headers ------------------------------------------------------------------------ Yorick Koster, January 20...
Design/Logic Flaw
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...