Breach Security ModSecurity for Apache DoS

Module hangs on incomplete HTTP POST multipart/form-data request...

ModSecurity < 2.5.9 Remote Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc ========================================================== ModSecurity 2.5.9 Remote Denial of Service Vulnerability ========================================================== ============================================= INTERNET SECURITY AUDITO...

ModSecurity 2.5.9 - Remote Denial of Service

ModSecurity 2.5.9 - Remote Denial of Service ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...

ModSecurity < 2.5.9 - Remote Denial of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored ============================================= I. VULNERABILI...

ModSecurity多个拒绝服务漏洞

BUGTRAQ ID: 34096 modsecurity是经常与PHP结合使用的Web应用防火墙。 如果启用了PDF跨站脚本防护的话，提交给PDF文件的非GET请求会导致httpd进程崩溃；此外如果modsecurity解析了缺少部分首部名称的多部内容的话，可能导致Apache崩溃。 Breach Security modsecurity 2.5.8 Breach Security modsecurity 2.5.6 Breach Security modsecurity 2.5.5 厂商补丁： Breach Security ---------------...

[SECURITY] Fedora 10 Update: mod_security-2.5.9-1.fc10

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...

ModSecurity Detection

Binary data 4956.prm...

ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability

This host is running ModSecurity and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmodsecuritysecbypassvuln.nasl 4522 2016-11-15 14:52:19Z teissa $ ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability Authors: Sujit Ghosal Copyright: Copyright c...

ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability

ModSecurity is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5676

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

CVE-2008-5676

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

Code injection

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

CVE-2008-5676

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

CVE-2008-5676

ModSecurity (mod_security) for the Apache HTTP Server is affected by CVE-2008-5676. The issue affects ModSecurity versions 2.5.0 through 2.5.5 when SecCacheTransformations is enabled, allowing remote attackers to cause a denial of service (daemon crash) or bypass the product’s functionality via u...

CVE-2008-5676: Undefined Security Weakness

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

Design/Logic Flaw

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

CVE-2007-1359

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

CVE-2007-1359

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

CVE-2007-1359

ModSecurity (mod_security)

CVE-2007-1359

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...