Amazon Linux AMI : httpd (ALAS-2013-174)

Multiple cross-site scripting XSS vulnerabilities in the balancerhandler function in the manager interface in modproxybalancer.c in the modproxybalancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML vi...

Apache HTTP Server mod_dav MERGE Request Denial of Service (CVE-2013-1896)

A denial of service vulnerability has been reported in the moddav component of Apache HTTP Server...

Cisco Unified IP Phone 8945 Crafted PNG Image Lockup Vulnerability

A vulnerability in PNG image processing of the Cisco Unified IP Phone 8945 running software version 9.32 could allow an unauthenticated, remote attacker to cause the phone to lock up. The vulnerability is due to incorrect processing of malformed PNG images. An attacker could exploit this...

Apache HTTP Server suEXEC符号链接任意文件访问漏洞

Apache HTTP Server是一款开源的WEB服务程序 Apache HTTP Server包含的suEXEC会不安全创建临时文件，允许攻击者利用漏洞通过符号链接针对.htaccess文件进行攻击，可用于访问任意文件 0 Apache HTTP Server 2.2.22 厂商解决方案 Apache ----------- 目前没有详细解决方案提供： http://httpd.apache.org/...

[SECURITY] Fedora 19 Update: php-5.5.3-1.fc19

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Apache HTTP Server 'mod_dav_svn' Denial of Service Vulnerability - Windows

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache HTTP Server Scoreboard Security Bypass Vulnerability - Windows

Apache HTTP Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:httpserver...

Fedora 18 : httpd-2.4.6-2.fc18 (2013-13922)

This update contains the latest release of the Apache HTTP Server, version 2.4.6. Two security issues are resolved in this update : - moddav: Sending a MERGE request against a URI handled by moddavsvn could trigger a segfault. CVE-2013-1896 - modsessiondbd: Make sure that dirty flag is respected...

Cogent DataHub - HTTP Server Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Cogent DataHub HTTP Server Buffer...

Cogent DataHub HTTP Server Buffer Overflow Vulnerability

This Metasploit module exploits a stack based buffer overflow on Cogent DataHub 7.3.0. The vulnerability exists in the HTTP server - while handling HTTP headers, a strncpy function is used in a dangerous way. This Metasploit module has been tested successfully on Cogent DataHub 7.3.0 Demo on...

Cogent DataHub HTTP Server Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Cogent DataHub HTTP Server Buffer...

[SECURITY] Fedora 18 Update: httpd-2.4.6-2.fc18

The Apache HTTP Server is a powerful, efficient, and extensible web server...

CentOS Update for httpd CESA-2013:1156 centos5

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2013:1156 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for httpd CESA-2013:1156 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for httpd CESA-2013:1156 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiniWeb (Build 300) Arbitrary File Upload Vulnerability

This Metasploit module exploits a vulnerability in MiniWeb HTTP server build 300. The software contains a file upload vulnerability that allows an unauthenticated remote attacker to write arbitrary files to the file system. Code execution can be achieved by first uploading the payload to the remo...

MiniWeb 300 - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 /MiniWeb/ include...

RHEL 6 : httpd (RHSA-2013:1156)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1156 advisory. The Apache HTTP Server is a popular web server. A flaw was found in the way the moddav module of the Apache HTTP Server handled merge requests. An...

MiniWeb (Build 300) Arbitrary File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 /MiniWeb/ include...

Scientific Linux Security Update : httpd on SL5.x, SL6.x i386/x86_64 (20130813)

A flaw was found in the way the moddav module of the Apache HTTP Server handled merge requests. An attacker could use this flaw to send a crafted merge request that contains URIs that are not configured for DAV, causing the httpd child process to crash. CVE-2013-1896 After installing the updated...