679 matches found
DEBIAN-CVE-2012-6687
FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...
CVE-2012-6687
FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...
CVE-2012-6687
FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...
CVE-2012-6687
CVE-2012-6687 affects FastCGI (fcgi/libfcgi) 2.4.0, where remote attackers can cause a denial of service (segmentation fault/crash) by opening a large number of connections. The underlying cause is discussed in Mageia MGASA-2016-0089: fcgi does not perform range checks for file descriptors before...
CVE-2012-6687
FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...
PT-2015-3536 · Openbsd +1 · Fastcgi +1
Name of the Vulnerable Software and Affected Versions: FastCGI versions 2.4.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, by establishing a large number of connections. Recommendations: For FastCGI version 2.4.0, consid...
Amazon Linux AMI : httpd24 (ALAS-2015-483)
modlua.c in the modlua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access...
Oracle Solaris Third-Party Patch Update : lighttpd (cve_2014_2469_denial_of)
The remote Solaris system is missing necessary patches to address security updates : - lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service memory consumption by breaking a request into...
DEBIAN-CVE-2014-3583
The handleheaders function in modproxyfcgi.c in the modproxyfcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service buffer over-read and daemon crash via long response headers...
CVE-2014-3583
The handleheaders function in modproxyfcgi.c in the modproxyfcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service buffer over-read and daemon crash via long response headers...
CVE-2014-3583
The handleheaders function in modproxyfcgi.c in the modproxyfcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service buffer over-read and daemon crash via long response headers...
UBUNTU-CVE-2014-3583
The handleheaders function in modproxyfcgi.c in the modproxyfcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service buffer over-read and daemon crash via long response headers...
Mail.ru: Выполнение кода PHP через FastCGI
Здравствуйте, Уязвимость существует на http://bw.mail.ru/ любой файл можно воспроизвести как php http://bw.mail.ru/robots.txt http://bw.mail.ru/robots.txt/c37hun.php http://bw.mail.ru/layout/all//img/imgmailru.gif http://bw.mail.ru/layout/all//img/imgmailru.gif/c37hun.php А для исправления Вам...
FreeBSD : rt42 -- vulnerabilities related to shellshock (81e2b308-4a6c-11e4-b711-6805ca0b3d42)
Best Practical reports : RT 4.2.0 and above may be vulnerable to arbitrary execution of code by way of CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, or CVE-2014-6271 -- collectively known as 'Shellshock.' This vulnerability requires a privileged user with access to an RT instance...
rt42 -- vulnerabilities related to shellshock
Best Practical reports: RT 4.2.0 and above may be vulnerable to arbitrary execution of code by way of CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, or CVE-2014-6271 -- collectively known as "Shellshock." This vulnerability requires a privileged user with access to an RT instance...
Apache Httpd < 2.4.12 : mod_proxy_fcgi out-of-bounds memory read
An out-of-bounds memory read was found in modproxyfcgi. A malicious FastCGI server could send a carefully crafted response which could lead to a crash when reading past the end of a heap memory or stack buffer. This issue affects version 2.4.10 only...
nginx 0.6.x - Arbitrary Code Execution NullByte Injection
No description provided by source. Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 = 0.7.65,...
Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
No description provided by source. / hoagielighttpd.c LIGHTTPD/FASTCGI REMOTE EXPLOIT = 1.4.17 Bug discovered by: Mattias Bengtsson [email protected] Philip Olausson [email protected] http://www.secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ FastCGI:...
Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
No description provided by source. / Remote Lighttpd + FastCGI + PHP example exploit Tested with Lighttpd 1.4.16 and PHP 5.2.4 To avoid abuse there's a remove me in the code. Example: ./exploit localhost 80 /etc/passwd or wget --referer=?php system'/usr/bin/id'; ? localhost ./exploit localhost 80...
Ubuntu 14.04 LTS : PHP updates (USN-2254-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2254-2 advisory. USN-2254-1 fixed vulnerabilities in PHP. The fix for CVE-2014-0185 further restricted the permissions on the PHP FastCGI Process Manager FPM UNIX socket. This...