CVE-2002-0427

Buffer overflows in fpexec in modfrontpage before 1.6.1 may allow attackers to gain root privileges...

PT-2002-1564 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: popper mod versions 1.2.1 and earlier Description: The issue concerns the PHP administration script in popper mod, which relies on Apache .htaccess authentication. This allows remote attackers to gain privileges if the script is not properly...

security flaw

Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...

phpBB2 Gender Mod 1.1.3 - SQL Injection

phpBB2 Gender Mod 1.1.3 - SQL Injection source: https://www.securityfocus.com/bid/5342/info phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating...

phpBB/gender mod allows get admin privilege, exploit/patch

Annoucement: Sua loi thay doi quyen user trong phpbb2.x In phpBB with the official Gender Mod, this vuln allows a normal user set her/himself to become a forum administrator. Nguoi viet/Author: PTTrung http://hackervn.net caothuvolam http://viethacker.net langtuhaohoa [email protected]...

phpBB2 Gender Mod 1.1.3 - SQL Injection

source: https://www.securityfocus.com/bid/5342/info phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Gender Mod is a modification for...

PT-2002-1687 · Apache · Mod Ssl

Name of the Vulnerable Software and Affected Versions: mod ssl Apache module versions 2.8.9 and earlier Description: The issue is related to an off-by-one buffer overflow in the ssl compat directive function, which is called by the rewrite command hook. This allows local users to execute arbitrar...

[SECURITY] [DSA-135-1] buffer overflow / DoS in libapache-mod-ssl

------------------------------------------------------------------------ Debian Security Advisory DSA-135-1 [email protected] http://www.debian.org/security/ Robert van der Meulen July 2, 2002 - ------------------------------------------------------------------------ Package : libapache-mod-ssl...

DSA-135 libapache-mod-ssl -- buffer overflow / DoS

Bulletin has no description...

[SECURITY] [DSA 120-1] New mod_ssl and Apache/SSL packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 120-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2002 - -------------------------------------------------------------------------- Package :...

Переполнение буфера в mod_frontpage (buffer overflow)

Переполнение буфера в fpexec.c...

Apache Httpd < 1.3.14 : Mass virtual hosting can display CGI source

A security problem for users of the mass virtual hosting module, modvhostalias, causes the source to a CGI to be sent if the cgi-bin directory is under the document root. However, it is not normal to have your cgi-bin directory under a document root...

CVE-2000-1206

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using modrewrite, or modvhostalias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...

quake2-more-bof.txt

Date: Fri, 22 Jan 1999 19:48:26 +0100 From: Patrick Oonk To: [email protected] Subject: More Quake2 buffer overflows and nuisances This was forwarded to me by Roderick van Domburg, Quake II admin at GamePoint www.gamepoint.net ----- Forwarded message from Roderick 'GoG' van Domburg ----- From...