8763 matches found
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
Arbitrary File Upload Vulnerability in Government Affairs Cluster Management System of Beijing Xiangyu Leading Software Co.
Beijing Xiangyu Leader Software Co., Ltd. government affairs cluster management system is an Internet service platform that provides information management services for Chinese government functional units at all levels. There is an arbitrary file upload vulnerability in the government cluster...
JGroups: Authorization bypass
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information...
Solaris 10 (x86) : 145639-11 (deprecated)
Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle S. Date this patch was last updated by Sun : Jan/08/18 This plugin has been deprecated and either replaced with individual 145639 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@...
Solaris 10 (sparc) : 145638-11 (deprecated)
Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle S. Date this patch was last updated by Sun : Jan/08/18 This plugin has been deprecated and either replaced with individual 145638 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@...
[SECURITY] Fedora 25 Update: mod_cluster-1.3.3-8.fc25
Modcluster is an httpd-based load balancer. Like modjk and modproxy, modcluster uses a communication channel to forward requests from httpd to one of a set of application server nodes. Unlike modjk and modproxy, modclus ter leverages an additional connection between the application server nodes a...
CVE-2016-3064
NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...
Red Hat mod_cluster Local Denial of Service Vulnerability
Red Hat modcluster is the United States Red Hat Red Hat a HTTP protocol based on the implementation of load balancing, fault-tolerant cluster module. A local denial of service vulnerability exists in Red Hat modcluster. An attacker could exploit this vulnerability to cause a denial of service...
PT-2018-5032 · Apache +1 · Apache Http Server Mod Cluster +1
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server mod cluster versions prior to 2.4.23 Description: The issue is related to an improper input validation in the protocol parsing logic of the load balancer, which can result in a segmentation fault in the serving httpd proces...
August 23, 2016 — KB3176934 (OS Build 14393.82)
None None...
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
mod_cluster: remotely Segfault Apache http server
It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...
CVE-2016-6595
DISPUTED The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service prevention of cluster joins via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old...
CVE-2016-3480
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql...
CVE-2016-3480
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql...
Code injection
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql...
CVE-2016-3480
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql...
CVE-2016-3480
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql...
CVE-2016-3480
CVE-2016-3480 affects the Solaris Cluster component of Oracle Sun Systems Products Suite versions 3.3 and 4.3, specifically the HA for Postgresql subcomponent. Connected sources describe a local vulnerability that could allow a local attacker to read data and thereby compromise confidentiality. T...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A security vulnerability exists in the HA for Postgresql subcomponent of the Solaris Cluster...