CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

AZL-7290 CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

AZL-36963 CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

Security feature bypass

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy of the Apache mod_fcgid module (through 2016-07-07). Affected component: mod_fcgid (FcgidPassHeader Proxy). Root cause: bypass vulnerability in FcgidPassHeader handling. Impact is stated as high by CVSS3.1 (AV:N/AC:L/PR:L/UI:N/S:...

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

Updated apache-mod_fcgid packages fix security vulnerability

A remote attacker could have set the HTTPPROXY environment variable of CGI scripts CVE-2016-1000104...

MGASA-2017-0203 Updated apache-mod_fcgid packages fix security vulnerability

A remote attacker could have set the HTTPPROXY environment variable of CGI scripts CVE-2016-1000104...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-2016-1005) (httpoxy)

This update for apache2-modfcgid fixes the following issues : - CVE-2016-1000104 / CVE-2016-5387: A remote attacker could have set the HTTPPROXY environment variable of CGI scripts boo988488 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Apache HTTP Server mod_fcgid Module Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Apache Software Foundation in the United States. modfcgid is one of the modcgi and modcgid alternatives Apache modules. A security bypass vulnerability exists in the modfcgid module in Apache HTTP Server. An attacker could exploit th...

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

Gentoo Security Advisory GLSA 201402-09

Gentoo Linux Local Security Checks GLSA 201402-09 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-238)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2013:1664-1)

security issue fixed in apache2-modfcgid : loop counter handled incorrectly, leading to SEGV and 'Premature end of script headers' errors. bnc844935 CVE-2013-4365 This patch will be obsoleted by the next version update to 2.3.9 or higher. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2011:0884-1)

A possible stack overflow in apache2-modfcgid due to wrong pointer arithmetic has been fixed. CVE-2010-3872 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2013:1609-1)

the following security issue was fixed in apache2-modfcgid : - fixes a heap overflow identified by CVE-2013-4365 bnc844935. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-808. T...

GLSA-201402-09 : Apache mod_fcgid: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201402-09 Apache modfcgid: Arbitrary code execution Apache modfcgid fails to perform a boundary check on user-supplied input, potentially resulting in a heap-based buffer overflow. Impact : A remote attacker can supply a crafted...

Apache mod_fcgid: Arbitrary code execution

Background Apache modfcgid is a binary-compatible alternative to modfastcgi with better process management. Description Apache modfcgid fails to perform a boundary check on user-supplied input, potentially resulting in a heap-based buffer overflow. Impact A remote attacker can supply a crafted...

[ MDVSA-2013:256 ] apache-mod_fcgid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:256 http://www.mandriva.com/en/support/security/ Package : apache-modfcgid Date : October 18, 2013 Affected: Business Server 1.0 Problem Description: Updated apache-modfcgid package fixes security...