3686 matches found
MGASA-2013-0295 Updated proftpd package fixes security vulnerability
A bug in ProFTPd's modsftp and modsftppam modules can be used to trigger a large heap allocation and exhaust all available system memory of the underlying operating system CVE-2013-4359...
PT-2013-5733
Name of the Vulnerable Software and Affected Versions Apache mod accounting module version 0.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the mod accounting.c file within the mod...
PT-2013-4972
Name of the Vulnerable Software and Affected Versions ProFTPD versions 1.3.4d through 1.3.5r3 Description The issue is related to an integer overflow in the mod sftp module of ProFTPD. This occurs when a large response count value is sent in an authentication request, causing excessive memory...
Debian Security Advisory DSA 2532-1 (libapache2-mod-rpaf - denial of service)
Sebastien Bocahu discovered that the reverse proxy add forward module for the Apache webserver is vulnerable to a denial of service attack through a single crafted request with many headers. OpenVAS Vulnerability Test $Id: deb25321.nasl 14276 2019-03-18 14:43:56Z cfischer $ Auto-generated from...
Debian Security Advisory DSA 2532-1 (libapache2-mod-rpaf - denial of service)
Sebastien Bocahu discovered that the reverse proxy add forward module for the Apache webserver is vulnerable to a denial of service attack through a single crafted request with many headers. OpenVAS Vulnerability Test $Id: deb25321.nasl 8972 2018-02-28 07:02:10Z cfischer $ Auto-generated from...
PT-2013-5046
Name of the Vulnerable Software and Affected Versions Apache Subversion versions 1.4.0 through 1.7.13 Apache Subversion versions 1.8.0 through 1.8.4 Description The issue allows remote attackers to bypass intended access restrictions and possibly cause a denial of service via a relative URL in a...
CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
CVE-2013-4283
CVE-2013-4283 affects ns-slapd in 389 Directory Server prior to 1.3.0.8, enabling a remote attacker to crash the server via a crafted DN in a MOD operation. The vulnerability is confirmed by OpenVAS/Open Vulnerability references; remediation is to apply the vendor/security updates that include 38...
CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
CVE-2013-4283: Improper Input Validation
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
httpd: XSS flaw in mod_proxy_balancer manager interface
Multiple cross-site scripting XSS vulnerabilities in the balancerhandler function in the manager interface in modproxybalancer.c in the modproxybalancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML vi...
httpd: mod_rewrite allows terminal escape sequences to be written to the log file
modrewrite.c in the modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator...
CentOS Update for 389-ds-base CESA-2013:1182 centos6
Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:1182 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Updated 389-ds-base packag fixes security vulnerabilies and incorrect group usage
Updated 389-ds-base packages fix security vulnerabilities: It was discovered that the 389 Directory Server did not honor defined attribute access controls when evaluating search filter expressions. A remote attacker with permission to query the Directory Server could use this flaw to determine th...
Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130828)
It was discovered that the 389 Directory Server did not properly handle the receipt of certain MOD operations with a bogus Distinguished Name DN. A remote, unauthenticated attacker could use this flaw to cause the 389 Directory Server to crash. CVE-2013-4283 After installing this update, the 389...
Important: Red Hat Security Advisory: 389-ds-base security update
Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
PT-2013-4934
Name of the Vulnerable Software and Affected Versions 389 Directory Server versions prior to 1.3.0.8 Description The issue allows remote attackers to cause a denial of service, resulting in a server crash. This can be achieved by sending a crafted Distinguished Name DN in a MOD operation request...
httpd: mod_rewrite allows terminal escape sequences to be written to the log file
modrewrite.c in the modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator...
httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav
moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...