5 matches found
ALPINE-CVE-2017-3169
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modssl may dereference a NULL pointer when third-party modules call aphookprocessconnection during an HTTP request to an HTTPS port...
PT-2016-3171
Name of the Vulnerable Software and Affected Versions Apache HTTP Server mod ssl versions 2.2.x through 2.2.32 Apache HTTP Server mod ssl versions 2.4.x through 2.4.25 Description The issue is related to a NULL pointer dereference error in the mod ssl module of the Apache HTTP Server. This error...
Fedora 16 : weechat-0.3.9.2-2.fc16 (2012-19538)
New upstream version Fix arbitrary code execution due to call of shell when executing command within hookprocess Fix the security bug in the linked Bugzilla. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
DEBIAN-CVE-2012-5534
The hookprocess function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."...
PT-2012-6007
Name of the Vulnerable Software and Affected Versions WeeChat versions 0.3.0 through 0.3.9.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to shell expansion, by exploiting the hook process function in the...