1257 matches found
Apache local buffer overflow
Buffer overflow on parsing regular expressions in .htaccess...
CVE-2002-0513
CVE-2002-0513 affects the popper_mod PHP administration script (versions 1.2.1 and earlier). The vulnerability arises because the admin interface relies on Apache .htaccess authentication, enabling remote attackers to gain administrative privileges if the administrator does not configure the scri...
CVE-2002-0653
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...
GOnicus System Administrator php injection
I. BACKGROUND The GOnicus System Administrator is a PHP based administration tool for managing accounts/systems in LDAP databases. Project homepage : http://www.gonicus.de II. DESCRIPTION A remote attacker can inject into GOsa arbitrary PHP code that executes under the privileges of the underlyin...
gBook
Informations : °°°°°°°°°°°°°° Language : PHP Tested version : 1.4 Problem : Admin access PHP Code : °°°°°°°°°° /gb/index.php : ------------------------------------------------------ ?php include"config.inc.php"; if$action == "login" if$user == $loginu && $pw == $loginpw setcookie"login", "true",...
CVE-2002-0919
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...
MySimpleNews (PHP)
Informations : °°°°°°°°°°°°°° Language : PHP Tested version : 1 Website : ? Comment : Very simple code. a Writing PHP code in a PHP file and execution of this code. Problem : °°°°°°°°° ----------------- users.php ----------------- ? $fp=fopen"news.php3","a"; fwrite$fp,"Post Par $LOGINn";...
EUVD-2002-0910
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...
CVE-2002-0919
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...
CVE-2002-0919
CGIScript.net csPassword.cgi is vulnerable: remote authenticated users can modify the .htaccess file and gain privileges by injecting newlines in the title field of the edit page. The impact is privilege escalation through file modification. No remediation or fix details are provided in the suppl...
CVE-2002-0513
The PHP administration script in poppermod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator...
PT-2002-1564 · Apache · Apache
Name of the Vulnerable Software and Affected Versions: popper mod versions 1.2.1 and earlier Description: The issue concerns the PHP administration script in popper mod, which relies on Apache .htaccess authentication. This allows remote attackers to gain privileges if the script is not properly...
security flaw
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...
security flaw
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...
security flaw
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...
CVE-2002-0653
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...
PT-2002-1687 · Apache · Mod Ssl
Name of the Vulnerable Software and Affected Versions: mod ssl Apache module versions 2.8.9 and earlier Description: The issue is related to an off-by-one buffer overflow in the ssl compat directive function, which is called by the rewrite command hook. This allows local users to execute arbitrar...
[SECURITY] [DSA-135-1] buffer overflow / DoS in libapache-mod-ssl
------------------------------------------------------------------------ Debian Security Advisory DSA-135-1 [email protected] http://www.debian.org/security/ Robert van der Meulen July 2, 2002 - ------------------------------------------------------------------------ Package : libapache-mod-ssl...
