3051 matches found
DEBIAN-CVE-2005-3357
modssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service application crash via a non-SSL request to an SSL port, which triggers a NULL pointer dereference...
DEBIAN-CVE-2005-4816
Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...
security flaw
sslenginekernel.c in modssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions...
httpd cross-site scripting flaw in mod_imap
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
DEBIAN-CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
eXtremeTraversal.txt
eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...
phpBB Blog 2.2.2 SQL inj. vuln.
phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...
eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities
eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...
CVE-2002-2176
The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...
CVE-2002-2176
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the userlevel parameter in the User Profile page...
CVE-2003-1243
Cross-site scripting vulnerability XSS in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter...
[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...
DSA-844-1 mod-auth-shadow - programming error
Bulletin has no description...
Debian DSA-844-1 : mod-auth-shadow - programming error
A vulnerability in modauthshadow, an Apache module that lets users perform HTTP authentication against /etc/shadow, has been discovered. The module runs for all locations that use the 'require group' directive which would bypass access restrictions controlled by another authorisation mechanism,...
Stoney FTPd Denial Of Service Exploit (rxBot mods ftpd)
No description provided by source. / untested /str0ke / / rx-dos.c by D-oNe There exists a buffer overflow in Stoneys FTPd that most rxBot mod's use. The problem lies in how the code parses the PORT command and gives an opportunity for a buffer overflow. Problem is that the ftpd also uses select ...
Debian DSA-807-1 : libapache-mod-ssl - acl restriction bypass
A problem has been discovered in modssl, which provides strong cryptography HTTPS support for Apache that allows remote attackers to bypass access restrictions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
[SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 807-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2005 http://www.debian.org/security/faq -...