7107 matches found
CVE-2024-45416: Inclusion of Functionality from Untrusted Control Sphere
The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in sessioninit function. The session -LUA- files are stored in the directory /var/luasession, the function iterates on all files in this directory and executes them using the function dofile without any validation i...
PT-2024-31619
Name of the Vulnerable Software and Affected Versions: ZTE routers affected versions not specified Description: The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in the session init function. This function executes session -LUA- files stored in the /var/lua session...
CVE-2024-45416
The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in sessioninit function. The session -LUA- files are stored in the directory /var/luasession, the function iterates on all files in this directory and executes them using the function dofile without any validation i...
CVE-2024-45413
The HTTPD binary in several ZTE routers contains a stack-based buffer overflow vulnerability within the rsa_decrypt function. This function serves as an API wrapper for LUA to decrypt RSA encrypted ciphertext, but it fails to verify the length of the decrypted data before storing it on the stack....
CVE-2024-45413: Stack-based Buffer Overflow
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsadecrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RC...
CVE-2024-45413
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsadecrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RC...
CVE-2024-45414
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checki...
RHSA-2014:0783 Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 httpd security and bug fix update
Bulletin has no description...
RHSA-2014:0826 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2 httpd security update
Bulletin has no description...
RHSA-2014:0370 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2014:0369 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2013:1156 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2013:1133 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2013:0815 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2013:0130 Red Hat Security Advisory: httpd security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2013:0512 Red Hat Security Advisory: httpd security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2012:0323 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2012:0128 Red Hat Security Advisory: httpd security update
Bulletin has no description...