1071 matches found
CVE-2007-1359: Undefined Security Weakness
Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...
Anti-Scanner Defenses (HTTP)
It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...
[Full-disclosure] CastleCops phpBB bbcode Input Validation Disclosure
CASTLECOPS.COM SUMMARY bbcode input validation Severity: High CastleCops: http://castlecops.com/t123194-.html CVE: CAN-2005-1193 phpBB Security ID: 266 Bugtraq ID: 13545 Secunia : 15298 US-CERT VU: 113196 SecurityTracker : 1013918 Vulnerable: viewtopic.php, privmsg.php for phpBB 2.0.14 possible a...
CVE-2004-1765
CVE-2004-1765 describes an off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x when SecFilterScanPost is enabled, allowing remote attackers to execute arbitrary code via crafted POST requests. The OpenVAS and Nessus/OpenVAS-derived feeds corroborate a remote overflow con...
CVE-2004-1765
Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...
CVE-2004-1765: Undefined Security Weakness
Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...
CVE-2004-1765
Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...
CVE-2002-1135
The CVE targets modsecurity.php 1.10 and earlier and phpWebSite 0.8.2 and earlier, where an inc_prefix parameter can point to malicious code, allowing remote PHP code execution. The issue is described with an attack vector over the network, with no authentication, and results in partial confident...
FreeBSD : ModSecurity for Apache 2.x remote off-by-one overflow (113)
The following package needs to be updated: modsecurity %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc2e1036877ab11d8b9e800e04ccb0a62.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[Full-Disclosure] ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow
S-Quadra Advisory 2004-03-15 Topic: ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow Severity: Average Vendor URL: http://www.modsecurity.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20040315.txt Release date: 15 Mar 2004 1. DESCRIPTION ModSecurity is an open source intrusi...
