CVE-2015-0228

The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function...

CVE-2015-0228

Apache HTTP Server mod_lua contains a Denial of Service vulnerability in lua_websocket_read (lua_request.c) affecting versions up to 2.4.12. A remote attacker can crash a child process by sending a crafted WebSocket Ping frame after a Lua script has invoked wsupgrade. The provided documents confi...

RedHat Update for httpd RHSA-2015:0325-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

httpd: bypass of mod_headers rules via chunked requests

A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header...

Low: Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Updated httpd packages that fix two security issues, several bugs, and add various enhancements are for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

A NULL pointer dereference flaw was found in the way the modcache httpd module handled Content-Type headers. A malicious HTTP server could cause the httpd child process to crash when the Apache HTTP server was configured to proxy to a server with caching enabled...

Jetty 9.2.8 Shared Buffer Leakage Vulnerability

Gotham Digital Science discovered a critical information leakage vulnerability in the Jetty web server that allows an unauthenticated remote attacker to read arbitrary data from previous requests and responses submitted to the server by other users. Jetty versions 9.2.3 through 9.2.8 are affected...

Swiss File Knife 1.7.4 Buffer Overflow

Document Title: =============== Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1441 Release Date: ============= 2015-02-27 Vulnerability Laboratory ID VL-ID: ==================================...

[SECURITY] Fedora 20 Update: httpd-2.4.10-2.fc20

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Apache HTTP Server 2.3.x Version Detection

Binary data 8946.prm...

Apache HTTP Server 2.2.x Version Detection

Binary data 8945.prm...

Apache HTTP Server 2.0.x Version Detection

Binary data 8943.prm...

Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability

Document Title: =============== Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1441 Release Date: ============= 2015-02-27 Vulnerability Laboratory ID VL-ID: ==================================...

Apache HTTP Server 2.4.10 FastCGI DoS

Binary data 8938.prm...

Apache HTTP Server 1.x Version Detection

Binary data 8942.prm...

Apache HTTP Server 2.4.x Version Detection

Binary data 8947.prm...

Apache HTTP Server 2.4 < 2.4.12 DoS

Binary data 8937.prm...

Apache HTTP Server 2.1.x Version Detection

Binary data 8944.prm...

[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2015-0228

The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function...