USN-23-1: apache2 vulnerability

Chintan Trivedi discovered a Denial of Service vulnerability in apache2. The field length limit was not enforced for certain malicious requests. This could allow a remote attacker who is able to send large amounts of data to a server to cause HTTP server instances to consume proportional amounts ...

FreeBSD : apache2 -- SSL remote DoS (16)

The following package needs to be updated: apache %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg7b81fc47239f11d9814e0001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: apache2 Advisory ID: MDKSA-2004:096 Date: September 15th, 2004 Affected versions: 10.0, 9.2 Problem Description: Two Denial of Service conditions were discovered in the input filter of modssl, the...

SUSE-SA:2004:030: apache2

The remote host is missing the patch for the advisory SUSE-SA:2004:030 apache2. The modssl apache module, as part of our apache2 package, enables the apache webserver to handle the HTTPS protocol. Within the modssl module, two Denial of Service conditions in the input filter have been found. The...

Mandrake Linux Security Advisory : apache2 (MDKSA-2004:043)

A memory leak in modssl in the Apache HTTP Server prior to version 2.0.49 allows a remote denial of service attack against an SSL-enabled server. The updated packages provide a patched modssl to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Immunity Canvas: SVNDATE

Name| svndate ---|--- CVE| CVE-2004-0397 Exploit Pack| CANVAS Description| Subversion = 1.0.2 utf-8 Apache2/WebDAV stack vs. heap exploit Notes| CVE Name: CVE-2004-0397 VENDOR: Collabnet OSVDB: http://osvdb.org/displayvuln.php?osvdbid=6301 Repeatability: Multiple tries References:...

Security fix for the ALT Linux 10 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 8 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 9 package apache2 version 2.0.40-21

Feb. 24, 2003 Joe Orton &[email protected] 2.0.40-21 - add security fix for CAN-2003-0020; replace non-printable characters with '!' when printing to error log. - disable debuginfo on IA64...

Security fix for the ALT Linux 8 package apache2 version 2.0.40-10

Oct. 9, 2002 Joe Orton &[email protected] 2.0.40-10 - fix patch for CAN-2002-0840 to also cover i18n error pages...

Security fix for the ALT Linux 10 package apache2 version 2.0.40-10

Oct. 9, 2002 Joe Orton &[email protected] 2.0.40-10 - fix patch for CAN-2002-0840 to also cover i18n error pages...

Security fix for the ALT Linux 9 package apache2 version 2.0.40-10

Oct. 9, 2002 Joe Orton &[email protected] 2.0.40-10 - fix patch for CAN-2002-0840 to also cover i18n error pages...

Security fix for the ALT Linux 8 package apache2 version 2.0.40-9

Oct. 2, 2002 Joe Orton &[email protected] 2.0.40-9 - security fixes for CAN-2002-0840 and CAN-2002-0843 - fix for possible moddav segfault for certain requests...

Security fix for the ALT Linux 9 package apache2 version 2.0.40-9

Oct. 2, 2002 Joe Orton &[email protected] 2.0.40-9 - security fixes for CAN-2002-0840 and CAN-2002-0843 - fix for possible moddav segfault for certain requests...

Security fix for the ALT Linux 10 package apache2 version 2.0.40-9

Oct. 2, 2002 Joe Orton &[email protected] 2.0.40-9 - security fixes for CAN-2002-0840 and CAN-2002-0843 - fix for possible moddav segfault for certain requests...

Multiple Vendor view_source CGI Traversal Arbitrary File Access

The 'viewsource' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik...