Low: Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Updated httpd packages that fix two security issues, several bugs, and add various enhancements are for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

A NULL pointer dereference flaw was found in the way the modcache httpd module handled Content-Type headers. A malicious HTTP server could cause the httpd child process to crash when the Apache HTTP server was configured to proxy to a server with caching enabled...

Jetty 9.2.8 Shared Buffer Leakage Vulnerability

Gotham Digital Science discovered a critical information leakage vulnerability in the Jetty web server that allows an unauthenticated remote attacker to read arbitrary data from previous requests and responses submitted to the server by other users. Jetty versions 9.2.3 through 9.2.8 are affected...

Swiss File Knife 1.7.4 Buffer Overflow

Document Title: =============== Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1441 Release Date: ============= 2015-02-27 Vulnerability Laboratory ID VL-ID: ==================================...

[SECURITY] Fedora 20 Update: httpd-2.4.10-2.fc20

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Apache HTTP Server 2.2.x Version Detection

Binary data 8945.prm...

Apache HTTP Server 2.3.x Version Detection

Binary data 8946.prm...

Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability

Document Title: =============== Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1441 Release Date: ============= 2015-02-27 Vulnerability Laboratory ID VL-ID: ==================================...

Apache HTTP Server 1.x Version Detection

Binary data 8942.prm...

Apache HTTP Server 2.4.10 FastCGI DoS

Binary data 8938.prm...

Apache HTTP Server 2.0.x Version Detection

Binary data 8943.prm...

Apache HTTP Server 2.1.x Version Detection

Binary data 8944.prm...

Apache HTTP Server 2.4 < 2.4.12 DoS

Binary data 8937.prm...

Apache HTTP Server 2.4.x Version Detection

Binary data 8947.prm...

[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2015-0228

The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function...

Amazon Linux AMI : httpd24 (ALAS-2015-483)

modlua.c in the modlua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access...

Low: httpd24

Issue Overview: modlua.c in the modlua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended...

CentOS 6 : subversion (CESA-2015:0165)

Updated subversion packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

CentOS 7 : subversion (CESA-2015:0166)

Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...