Mac OS X Multiple Vulnerabilities (Security Update 2005-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2005-007 applied. This security update contains fixes for the following products : - Apache 2 - AppKit - Bluetooth - CoreFoundation - CUPS - Directory Services - HItoolbox - Kerberos - loginwindow -...

CVE-2003-1171

Heap-based buffer overflow in the secfilterout function in modsecurity 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data...

CVE-2004-1765

Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...

CVE-2004-1765

Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...

CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

[SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 558-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 558-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[SA12434] Apache 2 mod_ssl Connection Abort Denial of Service

TITLE: Apache 2 modssl Connection Abort Denial of Service SECUNIA ADVISORY ID: SA12434 VERIFY ADVISORY: http://secunia.com/advisories/12434/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Apache 2.0.x http://secunia.com/product/73/ DESCRIPTION: A vulnerability has been reported ...

CVE-2004-0113

Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...

CVE-2004-0113

CVE-2004-0113 affects Apache httpd with mod_ssl on Apache 2 before 2.0.49. A memory leak in ssl_engine_io.c can be triggered by plain HTTP requests to the SSL port, leading to denial of service via memory consumption. Affected product is Apache HTTP Server with mod_ssl; root cause is a leak in SS...

Mandrake Linux Security Advisory : apache2 (MDKSA-2003:075-1)

Several vulnerabilities were discovered in Apache 2.x versions prior to 2.0.47. From the Apache 2.0.47 release notes : Certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one could result in the weak...

GLSA200403-04 Multiple security vulnerabilities in Apache 2

Gentoo Linux Security Advisory GLSA 200403-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-Disclosure] ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow

S-Quadra Advisory 2004-03-15 Topic: ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow Severity: Average Vendor URL: http://www.modsecurity.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20040315.txt Release date: 15 Mar 2004 1. DESCRIPTION ModSecurity is an open source intrusi...

Apache 2 mod_ssl denial-of-service

Joe Orton reports a memory leak in Apache 2's modssl. A remote attacker may issue HTTP requests on an HTTPS port, causing an error. Due to a bug in processing this condition, memory associated with the connection is not freed. Repeated requests can result in consuming all available memory...

ModSecurity for Apache 2.x remote off-by-one overflow

When the directive "SecFilterScanPost" is enabled, the Apache 2.x version of ModSecurity is vulnerable to an off-by-one overflow...

mod_security 1.7RC1 to 1.7.1 vulnerability

Program: modsecurity www.modsecurity.org Versions: 1.7RC1 to 1.7.1 Apache 2 version Synopsis: malloc based buffer overflow Author: Adam Dyga adeonato2.pl, adatadsystems.com.pl URL: http://adsystems.com.pl/adg-modsecurity171.txt Discovered: October 24, 2003 Published: October 28, 2003 Issue: There...

CVE-2003-0253

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service...

Apache 2.x APR Exploit Code

I had planned to write this tool in C for the sake of using native functionality like crypt3 to support digest authentication. I'd also planned to support intermediate proxies, but a determined user can implement this via various tunneling applications with minimal complications, and I don't need...

Apache 2.x leaked descriptors

Hello, I noticed a problem with apache 2.x back in October and contacted the apache security team with the problem. They've had about 4 months to do something with the problem but haven't seen fit to fix it yet. The last time I tried to status their progress no one replied to my query. I was...