USN-787-1: Apache vulnerabilities

Matthew Palmer discovered an underflow flaw in apr-util as included in Apache. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. This issue only affected Ubuntu 6.06 LTS. CVE-2009-0023 Sande...

CVE-2009-1139

Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode ADAM on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service memory consumption and service outage via 1 LDAP or...

FreeBSD Ports: apr

The remote host is missing an update to the system as announced in the referenced advisory. VID eb9212f7-526b-11de-bbf2-001b77d09812 OpenVAS Vulnerability Test $ Description: Auto generated from VID eb9212f7-526b-11de-bbf2-001b77d09812 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:131 (apr-util)

The remote host is missing an update to apr-util announced via advisory MDVSA-2009:131. OpenVAS Vulnerability Test $Id: mdksa2009131.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:131 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandrake Security Advisory MDVSA-2009:131-1 (apr-util)

The remote host is missing an update to apr-util announced via advisory MDVSA-2009:131-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:131-1 (apr-util)

The remote host is missing an update to apr-util announced via advisory MDVSA-2009:131-1. OpenVAS Vulnerability Test $Id: mdksa20091311.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:131-1 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Design/Logic Flaw

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

Mandriva Linux Security Advisory : apr-util (MDVSA-2009:131)

Multiple security vulnerabilities has been identified and fixed in apr-util : The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the...

CVE-2009-1955

CVE-2009-1955 affects the Expact XML parser used by the apr_xml_* interface in xml/apr_xml.c of APR-util, with the vulnerability present in APR-util prior to 1.3.7. In Apache HTTP Server deployments that enable mod_dav and mod_dav_svn, a crafted XML document containing a large number of nested en...

Apache Httpd < 2.2.12 : APR-util XML DoS

A denial of service flaw was found in the bundled copy of the APR-util library Extensible Markup Language XML parser. A remote attacker could create a specially-crafted XML document that would cause excessive memory consumption when processed by the XML decoding engine...

RedHat Security Advisory RHSA-2009:1075

The remote host is missing updates announced in advisory RHSA-2009:1075. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all...

Apache apr-util webDav DoS

Memory consuption on large number of Entity elements...

RedHat Security Advisory RHSA-2009:1075

The remote host is missing updates announced in advisory RHSA-2009:1075. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all...

Mandrake Security Advisory MDVSA-2009:120 (openssl)

The remote host is missing an update to openssl announced via advisory MDVSA-2009:120. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD Ports: opensll

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: opensll

The remote host is missing an update to the system as announced in the referenced advisory. VID 82b55df8-4d5a-11de-8811-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 82b55df8-4d5a-11de-8811-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1828

Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service infinite loop, application hang, and memory consumption via a KEYGEN element in conjunction with 1 a META element specifying automatic page refresh or 2 a JavaScript onLoad event handler for a BODY element. NOTE: it was...

Code injection

Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service infinite loop, application hang, and memory consumption via a KEYGEN element in conjunction with 1 a META element specifying automatic page refresh or 2 a JavaScript onLoad event handler for a BODY element. NOTE: it was...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1075 Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and...