542 matches found
[SECURITY] Fedora 22 Update: varnish-4.0.3-3.fc22
This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...
Varnish Cache 4.03 Buffer Overflow
Hi there, Latest varnish-cache 4.0.3 https://www.varnish-cache.org/ seem to have a problem with parsing HTTP responses from backend. The following example response will trigger a heap buffer overflow : -- cut -- perl -e 'print "HTTP/1.1 200 OK\r\nContent-Length: dupa" . "\n" x 15855 . "A" x 10000...
Varnish Cache CLI Interface Remote Code Execution Exploit
This Metasploit module attempts to login to the Varnish Cache varnishd CLI instance using a bruteforce list of passwords. This Metasploit module will also attempt to read the /etc/shadow root password hash if a valid password is found. It is possible to execute code as root with a valid password,...
Varnish Cache CLI Interface Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This module attempts to login to the Varnish Cache varnishd CLI...
Varnish Cache CLI Interface - Remote Code Execution (Metasploit)
Varnish Cache CLI Interface - Remote Code Execution Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This...
Varnish Cache CLI Interface - Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This module attempts to login to the Varnish Cache varnishd CLI...
openSUSE Security Update : varnish (openSUSE-SU-2013:1679-1)
This update fixes the following security issue with varnish : - bnc848451, CVE-2013-4484: fixed denial of service flaw in certain GET requests when using certain configurations in Varnish Cache handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
Fedora Update for varnish FEDORA-2013-24023
Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-24023 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for varnish FEDORA-2013-24018
Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-24018 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 20 Update: varnish-3.0.5-1.fc20
This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...
[SECURITY] Fedora 19 Update: varnish-3.0.5-1.fc19
This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...
Varnish HTTP cache DoS
assert on empty request...
[CVE-2013-4484] DoS vulnerability in Varnish HTTP cache
Summary ======= Varnish Cache with certain configurations is vulnerable to a denial of service attack. Three lines of VCL code solves the problem. This issue was discovered by Ilia Sharov, Yandex. This has been assigned CVE-2013-4484. Details ======= If Varnish receives a certain illegal request,...
Varnish Cache server Denial Of Service
If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of service and the cache will be emptie...
Varnish Cache Denial Of Service
Summary ======= Varnish Cache with certain configurations is vulnerable to a denial of service attack. Three lines of VCL code solves the problem. This issue was discovered by Ilia Sharov, Yandex. This has been assigned CVE-2013-4484. Details ======= If Varnish receives a certain illegal request,...
varnish -- DoS vulnerability in Varnish HTTP cache
Varnish Cache Project reports: If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of servi...
Fedora Update for varnish FEDORA-2013-8381
Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-8381 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for varnish FEDORA-2013-8377
Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-8377 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 19 Update: varnish-3.0.3-5.fc19
This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...