DEBIAN-CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

Ubuntu 4.10 / 5.04 / 5.10 : apache2, apache vulnerabilities (USN-241-1)

The 'modimap' module which provides support for image maps did not properly escape the 'referer' URL which rendered it vulnerable against a cross-site scripting attack. A malicious web page or HTML email could trick a user into visiting a site running the vulnerable modimap, and employ...

Ubuntu 4.10 : apache2 vulnerability (USN-23-1)

Chintan Trivedi discovered a Denial of Service vulnerability in apache2. The field length limit was not enforced for certain malicious requests. This could allow a remote attacker who is able to send large amounts of data to a server to cause HTTP server instances to consume proportional amounts ...

GLSA-200601-05 : mod_auth_pgsql: Multiple format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200601-05 modauthpgsql: Multiple format string vulnerabilities The error logging functions of modauthpgsql fail to validate certain strings before passing them to syslog, resulting in format string vulnerabilities. Impact : An...

Ubuntu 4.10 / 5.04 : apache2 vulnerability (USN-120-1)

Luca Ercoli discovered that the 'htdigest' program did not perform any bounds checking when it copied the 'user' and 'realm' arguments into local buffers. If this program is used in remotely callable CGI scripts, this could be exploited by a remote attacker to execute arbitrary code with the...

Ubuntu 4.10 / 5.04 : pcre3, apache2 vulnerabilities (USN-173-2)

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library. However, it was determined that this did not suffice to prevent all possible overflows, so another update is necessary. In addition, it was found that the Ubuntu 4.10 version of Apache 2 contains a static copy of the library cod...

Mandrake Linux Security Advisory : apache2-mod_auth_pgsql (MDKSA-2006:009)

iDefense discovered several format string vulnerabilities in the way that modauthpgsql logs information which could potentially be used by a remote attacker to execute arbitrary code as the apache user if modauthpgsql is used for user authentication. The provided packages have been patched to...

Mandrake Linux Security Advisory : apache2 (MDKSA-2006:007)

A flaw was discovered in modimap when using the Referer directive with image maps that could be used by a remote attacker to perform a cross- site scripting attack, in certain site configurations, if a victim could be forced to visit a malicious URL using certain web browsers CVE-2005-3352. Also,...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:233)

A memory leak in the worker MPM in Apache 2 could allow remote attackers to cause a Denial of Service memory consumption via aborted commands in certain circumstances, which prevents the memory for the transaction pool from being reused for other connections. As well, this update addresses two bu...

Ubuntu 4.10 / 5.04 : apache2, libapache-mod-ssl vulnerabilities (USN-177-1)

Apache did not honour the 'SSLVerifyClient require' directive within a block if the surrounding block contained a directive 'SSLVerifyClient optional'. This allowed clients to bypass client certificate validation on servers with the above configuration. CAN-2005-2700 Filip Sneppe discovered a...

Ubuntu 4.10 : apache2 bug fix (USN-173-3)

USN-173-2 fixed a vulnerability in Apache's regular expression parser. However, the packages from that advisories had a bug that prevented Apache from starting. This update fixes this. We apologize for the inconvenience!. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 4.10 / 5.04 : apache2 vulnerabilities (USN-160-1)

Marc Stern discovered a buffer overflow in the SSL module's certificate revocation list CRL handler. If Apache is configured to use a malicious CRL, this could possibly lead to a server crash or arbitrary code execution with the privileges of the Apache web server. CAN-2005-1268 Watchfire...

mod_auth_pgsql: Multiple format string vulnerabilities

Background modauthpgsql is an Apache2 module that allows user authentication against a PostgreSQL database. Description The error logging functions of modauthpgsql fail to validate certain strings before passing them to syslog, resulting in format string vulnerabilities. Impact An unauthenticated...

Mac OS X Multiple Vulnerabilities (Security Update 2005-009)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications : - Apache2 - Apachemodssl - CoreFoundation - curl - iodbcadmintool - OpenSSL - passwordserver - Safari - sudo - syslog C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:155)

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow. The apache2 packages, as shipped, were buil...

SUSE-SA:2005:052: apache2

The remote host is missing the patch for the advisory SUSE-SA:2005:052 apache2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2005:052 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...