openSUSE Security Update : apache2-mod_wsgi (openSUSE-SU-2014:1590-1)

apache2-modwsgi was updated to fix one security issue. This security issue was fixed : - Failure to handle errors when attempting to drop group privileges CVE-2014-8583. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9916)

This update fixes the following vulnerabilities in php : - Heap corruption issue in exifthumbnail. CVE-2014-3670 - Integer overflow in unserialize. CVE-2014-3669 - Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DLA 71-1] apache2 security update

Package : apache2 Version : 2.2.16-6+squeeze14 CVE ID : CVE-2013-5704 CVE-2014-3581 This update fixes two security issues with apache2. CVE-2013-5704 Disable the possibility to replace HTTP headers with HTTP trailers as this could be used to circumvent earlier header operations made by other...

DLA-71-1 apache2 - security update

Bulletin has no description...

Apache2 PHP Component Chunked Transfer Encoding Policy Bypass (CVE-2013-5705; CVE-2018-17082)

A cross-site scripting vulnerability exists in Apache2 PHP component. The vulnerability is due to improper comparison of the user supplied input of the HTTP Transfer-encoding header field. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted HTTP request to sen...

[SECURITY] [DLA 66-1] apache2 security update

Package : apache2 Version : 2.2.16-6+squeeze13 CVE ID : CVE-2013-6438 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2014-0231: prevent denial of service in modcgid. CVE-2014-0226: prevent denial of service via race in modstatus. CVE-2014-0118: fix resource consumption via moddeflate body...

SUSE-RU-2015:0591-1 Recommended update for apache2-mod_nss

This update brings several improvements to apache2-modnss. More TLS 1.2 ciphers have been added, including AES-GCM and Camelia ciphers. These can be selected by their tags: o rsaaes128sha256 o rsaaes128gcmsha o rsaaes256sha256 o rsacamellia128sha o rsacamellia256sha o ecdhecdsaaes128gcmsha o...

openSUSE Security Update : apache2 (openSUSE-SU-2014:1044-1)

This apache2 update fixes the following security issues : - fix for crash in modproxy processing specially crafted requests with reverse proxy configurations that results in a crash and a DoS condition for the server. CVE-2014-0117 - new config option CGIDScriptTimeout set to 60s in new file...

openSUSE Security Update : apache2 (openSUSE-SU-2014:1045-1)

This apache2 update fixes the following security issues : - CRIME types of attack, based on size and timing analysis of compressed content, are now mitigated by the new SSLCompression directive, set to 'no' in /etc/apache2/ssl-global.conf - ssl-global.conf: SSLHonorCipherOrder set to on -...

openSUSE Security Update : apache2-mod_security2 (openSUSE-SU-2014:1047-1)

This is apache2-modsecurity2 update fixes the following security issue : - Specially drafted chunked http requests allow to bypass filters configured in modsecurity2. This vulnerability is known as CVE-2013-5705 and was handled in bnc871309. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : apache2-mod_nss (openSUSE-SU-2014:0979-1)

apache2-modnss is alternative yet not exclusive to modnss. This update introduces Server Name Indication support to modnss, which was not available previously. In addition to SNI, GCM ciphers have been added to the cipher list of modnss. A bug was corrected that prevented the entry of the...

SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 9585)

This apache2-modsecurity2 update fixes the following security issue : - bypass of intended rules via chunked requests CVE-2013-5705. bnc871309 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

openSUSE: Security Advisory for security (openSUSE-SU-2014:0969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

security issues addressed, most notably the mod_security heap overflow known as CVE-2014-0226 (important)

apache2: - ECC support was added to modssl - fix for a race condition in modstatus known as CVE-2014-0226 can lead to information disclosure; modstatus is not active by default, and is normally only open for connects from localhost. - fix for bug known as CVE-2014-0098 that can crash the apache...

openSUSE Security Update : apache2-mod_wsgi (openSUSE-2014-470)

apache2-modwsgi was updated to fix a small of-by-one error in its use of setgroups. Please see http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.h tml for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)

apache2-modwsgi was updated to fix a small of-by-one error in its use of setgroups. Please see http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.h tml for more information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Ubuntu: Security Advisory (USN-2299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2989-1 : apache2 - security update

Several security issues were found in the Apache HTTP server. - CVE-2014-0118 The DEFLATE input filter inflates request bodies in moddeflate allows remote attackers to cause a denial of service resource consumption via crafted request data that decompresses to a much larger size. - CVE-2014-0226 ...

[SECURITY] [DSA 2989-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2989-1 [email protected] http://www.debian.org/security/ Stefan Fritsch July 24, 2014 http://www.debian.org/security/faq -...

Joomla Component BF Quiz SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...