Sophos Web Protection Appliance Open Redirect Vulnerability

The Sophos Web Protection application running on the remote host is affected by an open redirect vulnerability in the FTP over HTTP page due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted link,...

Moderate: Red Hat Security Advisory: httpd security and bug fix update

Updated httpd packages that resolve several security issues and fix a bug are now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was foun...

Apache Httpd < 2.0.64 : mod_proxy_ftp globbing XSS

A flaw was found in the handling of wildcards in the path of a FTP URL with modproxyftp. If modproxyftp is enabled to support FTP-over-HTTP, requests containing globbing characters could lead to cross-site scripting XSS attacks...