Ubuntu USN-844-1 (mimetex)

The remote host is missing an update to mimetex announced via advisory USN-844-1. OpenVAS Vulnerability Test $Id: ubuntu8441.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8441.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-844-1 mimetex Authors: Thomas...

html2ps - include file Server-Side Include Directive Directory Traversal

html2ps - include file Server-Side Include Directive Directory Traversal !/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data...

html2ps 'include file' Server Side Include Directive Directory Traversal

Exploit for unknown platform in category web applications ======================================================================== html2ps 'include file' Server Side Include Directive Directory Traversal Vulnerability ========================================================================...

html2ps - 'include file' Server-Side Include Directive Directory Traversal

!/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data that you control the vuln requires that "ssi" in the @html2ps block in t...

html2ps 1.0 beta5 File Disclosure

!/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data that you control the vuln requires that "ssi" in the @html2ps block in t...

html2ps 1.0 beta5 file disclosure

Exploit for unknown platform in category web applications ================================= html2ps 1.0 beta5 file disclosure ================================= !/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. VID e15f2356-9139-11de-8f42-001aa0166822 OpenVAS Vulnerability Test $ Description: Auto generated from VID e15f2356-9139-11de-8f42-001aa0166822 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1156

The remote host is missing updates announced in advisory RHSA-2009:1156. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume...

RedHat Security Advisory RHSA-2009:1156

The remote host is missing updates announced in advisory RHSA-2009:1156. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume...

DEBIAN-CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

PT-2009-1036 · Mimetex +1 · Mimetex +1

Name of the Vulnerable Software and Affected Versions: mimetex versions prior to 20090713 Description: The issue concerns multiple unspecified vulnerabilities in mimetex. These vulnerabilities are related to the environ, input, and counter TeX directives and may allow for remote exploitation,...

Debian Security Advisory DSA 1816-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 1816-1. OpenVAS Vulnerability Test $Id: deb18161.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1816-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1816-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1816-1 apache2 apache2-mpm-itk - privilege escalation

Bulletin has no description...

Heap overflow

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

RedHat Security Advisory RHSA-2009:1075

The remote host is missing updates announced in advisory RHSA-2009:1075. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all...

Mandriva Linux Security Advisory : apache (MDVSA-2009:124-1)

Multiple vulnerabilities has been found and corrected in apache : Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial S...

DEBIAN-CVE-2009-1195

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...

CVE-2009-1195

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...

Design/Logic Flaw

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...