506 matches found
httpd, mod_ssl security update
CentOS Errata and Security Advisory CESA-2012:0128 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
HTTP Version Detection
Display version information about each system. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Version Detection', 'Description' = 'Display version information about each system.', 'Author...
Apache mod_proxy_ajp Information Disclosure Vulnerability
This host is running Apache Web Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodapachemodproxyajpinfodiscvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache modproxyajp Information Disclosure Vulnerability Authors: Sujit Ghosal Copyright: Copyrig...
HTTP Version Detection
Checks the supported HTTP version of the remote system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-724-1: Squid vulnerability
Joshua Morin, Mikko Varpiola and Jukka Taimisto discovered that Squid did not properly validate the HTTP version when processing requests. A remote attacker could exploit this to cause a denial of service assertion failure...
Squid HTTP Version Number Parsing Denial of Service (CVE-2009-0478)
The Squid proxy server is a popular open source, Internet proxy and web caching application. A denial of service vulnerability has been reported in Squid proxy. The vulnerability is due to an error within the Squid proxy that fails to properly parse version numbers when processing malformed HTTP...
Squid Web代理缓存HTTP版本号解析拒绝服务漏洞
BUGTRAQ ID: 33604 CVECAN ID: CVE-2009-0478 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid没有正确地处理畸形的HTTP版本号，远程客户端可以向服务器发送特制请求导致拒绝服务的情况。 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.7 厂商补丁： Squid -----...
DEBIAN-CVE-2009-0478
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in 1 HttpMsg.c and 2 HttpStatusLine.c...
Preemptive Protection against Squid HTTP Version Number Parsing Denial of Service
A denial of service vulnerability was reported in the Squid proxy server. The Squid proxy server is a popular open source, Internet proxy and web caching application.The vulnerability is due to inappropriate parsing of the version number when processing malformed HTTP requests. Remote...
Preemptive Protection against Oracle WebLogic Server Apache Connector HTTP Version String Buffer Vulnerability
A string buffer overflow vulnerability has been reported in Oracle BEA WebLogic Server Apache Connector. BEA WebLogic Server is a Java Application Server platform that supports various databases including Oracle. A remote attacker may exploit this vulnerability to execute arbitrary code on a...
Stack overflow
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
CVE-2007-2952
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
CVE-2007-2952
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
HyperText Transfer Protocol (HTTP) Information
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive is enabled, etc... This test is informational only and does not denote any security problem. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24260;...
Centrinity FirstClass HTTP Server 5.505.777.07.1 - Long Version Field Denial of Service
Centrinity FirstClass HTTP Server 5.505.777.07.1 - Long Version Field Denial of Service // source: https://www.securityfocus.com/bid/8793/info A problem has been reported in the handling of overly long HTTP version string data by Centrinity FirstClass. Because of this, it may be possible for an...
Pserv 2.0 - HTTP Version Specifier Buffer Overflow
Pserv 2.0 - HTTP Version Specifier Buffer Overflow source: https://www.securityfocus.com/bid/6285/info A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this...
CVE-2002-1169
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service crash via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash...
IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow
IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow // source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging serve...
BufferOverflow in OmniHTTPd 2.09
Hi there. The OmniHTTPd v2.09 of Omnicron www.omnicron.ca contains a problem with handling long HTTP versions which causes a denial of service. Found this problem while developing a new plugin for BED Bruteforce Exploit Detector,www.kryptocrew.de/snakebyte/bed.html. Problem When sending a malform...