Mandrake Linux Security Advisory : apache2 (MDKSA-2005:161)

A flaw was discovered in modssl's handling of the 'SSLVerifyClient' directive. This flaw occurs if a virtual host is configured using 'SSLVerifyClient optional' and a directive 'SSLVerifyClient required' is set for a specific location. For servers configured in this fashion, an attacker may be ab...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:129)

Marc Stern reported an off-by-one overflow in the modssl CRL verification callback which can only be exploited if the Apache server is configured to use a malicious certificate revocation list CVE-2005-1268. Watchfire reported a flaw that occured when using the Apache server as a HTTP proxy. A...

SUSE-SA:2005:046: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2005:046 apache,apache2. A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to 'smuggle' requests past filters by providing handcrafted header entries. Fixed Apache 2 server packages were...

[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 805-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 805-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...

Security fix for the ALT Linux 10 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...

Security fix for the ALT Linux 8 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...

Security fix for the ALT Linux 9 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...

FreeBSD : apache2 multiple space header denial-of-service vulnerability (9)

The following package needs to be updated: apache %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg282dfea0337811d9b404000c6e8f12ef.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

USN-23-1: apache2 vulnerability

Chintan Trivedi discovered a Denial of Service vulnerability in apache2. The field length limit was not enforced for certain malicious requests. This could allow a remote attacker who is able to send large amounts of data to a server to cause HTTP server instances to consume proportional amounts ...

FreeBSD : apache2 -- SSL remote DoS (16)

The following package needs to be updated: apache %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg7b81fc47239f11d9814e0001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: apache2 Advisory ID: MDKSA-2004:096 Date: September 15th, 2004 Affected versions: 10.0, 9.2 Problem Description: Two Denial of Service conditions were discovered in the input filter of modssl, the...

SUSE-SA:2004:030: apache2

The remote host is missing the patch for the advisory SUSE-SA:2004:030 apache2. The modssl apache module, as part of our apache2 package, enables the apache webserver to handle the HTTPS protocol. Within the modssl module, two Denial of Service conditions in the input filter have been found. The...

Mandrake Linux Security Advisory : apache2 (MDKSA-2004:043)

A memory leak in modssl in the Apache HTTP Server prior to version 2.0.49 allows a remote denial of service attack against an SSL-enabled server. The updated packages provide a patched modssl to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Immunity Canvas: SVNDATE

Name| svndate ---|--- CVE| CVE-2004-0397 Exploit Pack| CANVAS Description| Subversion = 1.0.2 utf-8 Apache2/WebDAV stack vs. heap exploit Notes| CVE Name: CVE-2004-0397 VENDOR: Collabnet OSVDB: http://osvdb.org/displayvuln.php?osvdbid=6301 Repeatability: Multiple tries References:...

Security fix for the ALT Linux 10 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 9 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 8 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 8 package apache2 version 2.0.40-10

Oct. 9, 2002 Joe Orton &[email protected] 2.0.40-10 - fix patch for CAN-2002-0840 to also cover i18n error pages...

Security fix for the ALT Linux 10 package apache2 version 2.0.40-10

Oct. 9, 2002 Joe Orton &[email protected] 2.0.40-10 - fix patch for CAN-2002-0840 to also cover i18n error pages...