CVE-2011-4415

The CVE-2011-4415 issue affects the Apache HTTP Server (2.0.x up to 2.0.64 and 2.2.x up to 2.2.21) when mod_setenvif is enabled. The root cause is an integer overflow in ap_pregsub during environment variable handling (SetEnvIf), with a crafted .htaccess and HTTP header causing memory exhaustion ...

CVE-2011-3607

Integer overflow in the appregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the modsetenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

IBM HTTP Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

Apache HTTP Server "ap_pregsub()"函数本地权限提升漏洞

BUGTRAQ ID: 50494 CVE ID: CVE-2011-3607 Apache HTTP Server是Apache软件基金会的一个开放源代码的网页服务器，可以在大多数电脑操作系统中运行，由于其跨平台和安全性被广泛使用，是最流行的Web服务器端软件之一。 Apache HTTP Server在"appregsub"函数的实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞以提升的权限执行任意代码。 要触发此漏洞，需要启用modsetenvif，并且攻击者可以在受影响服务器中放置恶意的.htaccess文件。此漏洞源于 "appregsub" 函数 server/utils.c...

Mini-Stream 3.0.1.1 Buffer Overflow Exploit

Exploit for windows platform in category local exploits $Id: ministream.rb 14155 2011-11-04 08:20:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Apache 2.0.64 2.2.21 mod_setenvif - Integer Overflow

Apache 2.0.64 2.2.21 modsetenvif - Integer Overflow Source: http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/ Background The Apache HTTP Server is an open-source HTTP server for modern operating systems including UNIX, Microsoft Windows, Mac OS/X and Netware. The goal of this...

Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow

Source: http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/ Background The Apache HTTP Server is an open-source HTTP server for modern operating systems including UNIX, Microsoft Windows, Mac OS/X and Netware. The goal of this project is to provide a secure, efficient and...

Medium: httpd

Issue Overview: It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

CVE-2011-1360

CVE-2011-1360 covers multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier. The issue arises from untrusted input in documentation-related paths (manual/ibm/ and htdocs/*/manual/ibm/), enabling an attacker to inject arbitrary script/HTML. Products using IBM HTT...

Exploit for Uncontrolled Resource Consumption in Apache Http_Server

PoC exploit for CVE-2011-3192, a Range Header DoS vulnerability...

SuSE 10 Security Update : Apache (ZYPP Patch Number 7721)

This update fixes a remote denial of service bug memory exhaustion in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges. CVE-2011-3192 It also fixes some non-security bugs : - take LimitRequestFieldsize config option into account when...

Apache HTTP server Denial of service venerability

No description provided by source. !/usr/bin/perl -w Exploit Title: Apache Server Denial of Service exploit DDOS Date: 22/10/2011 Author: Xen0n Software Link: http://www.apache.org/dyn/closer.cgi Version: 2.3.14 and older Tested on: CentOs feel free to contact us [email protected] use strict; u...

Apple Safari libxslt File Create

Added: 10/24/2011 CVE: CVE-2011-1774 BID: 48840 OSVDB: 74017 Background Safari is a web browser for Mac OS X and Windows. Problem Safari versions prior to 5.0.6 use unsafe security settings when implementing libxslt. An attacker may leverage this weakness by creating a web page that references a...

RedHat Update for httpd RHSA-2011:1392-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 4 / 5 : httpd (CESA-2011:1392)

Updated httpd packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHEL 6 : httpd (RHSA-2011:1391)

Updated httpd packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...