3308 matches found
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
asus.com XSS vulnerability
Vulnerable URL: http://www.asus.com/zentalk/tw/misc.php?mod=tag=2030ehvpt"...
[SECURITY] Fedora 25 Update: mod_cluster-1.3.3-8.fc25
Modcluster is an httpd-based load balancer. Like modjk and modproxy, modcluster uses a communication channel to forward requests from httpd to one of a set of application server nodes. Unlike modjk and modproxy, modclus ter leverages an additional connection between the application server nodes a...
SUSE-SU-2016:2285-1 Security update for apache2-mod_nss
This update provides apache2-modnss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. CVE-2016-3099 - Created valgrind suppression files to ease debugging. - Implement SSLPPTYPEFILTER to call executables to get the key password pins. - Improvements t...
raf.mod.uk XSS vulnerability
Vulnerable URL:...
PHP 'ext/session/mod_files.c' Buffer Overflow Vulnerability
PHP is an open source general-purpose computer scripting language. A buffer overflow vulnerability exists in PHP 'ext/session/modfiles.c', which allows attackers to exploit the vulnerability to execute arbitrary script code or cause a denial of service...
PT-2018-5032 · Apache +1 · Apache Http Server Mod Cluster +1
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server mod cluster versions prior to 2.4.23 Description: The issue is related to an improper input validation in the protocol parsing logic of the load balancer, which can result in a segmentation fault in the serving httpd proces...
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
Moodle 2.5.x < 2.5.5 Multiple Vulnerabilities
Binary data 9423.prm...
Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities
Binary data 9392.prm...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the proftpd-mod-pgsql package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the proftpd-mod-ldap package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the proftpd-mod-mysql package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Apache HTTP Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The status of the competition in the modstatus module of the Apache HTTP Server allows malicious actors operating remotely to trigger service failures overflow of buffers in dynamic memory, gain access to confidential information, or execute arbitrary code through a specially crafted request. Thi...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the wzdftpd-mod-perl package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Apache HTTP Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability exists in the modcgid module of the Apache HTTP Server due to the absence of a timeout mechanism. Exploiting this vulnerability allows malicious actors to cause a service failure by sending requests to the CGI script, thereby ignoring the data from their own stdin descriptor...
The vulnerability of Cisco Nexus 7000 software allows a malicious individual to execute arbitrary code.
The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that this...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the wzdftpd-mod-tcl package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...