5 matches found
CVE-2010-0408
The approxyajprequest function in modproxyajp.c in modproxyajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service backend server outage via a crafted request,...
Mandrake Security Advisory MDVSA-2009:102 (apache)
The remote host is missing an update to apache announced via advisory MDVSA-2009:102. OpenVAS Vulnerability Test $Id: mdksa2009102.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:102 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Apache mod_proxy_ajp Information Disclosure Vulnerability
This host is running Apache Web Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodapachemodproxyajpinfodiscvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache modproxyajp Information Disclosure Vulnerability Authors: Sujit Ghosal Copyright: Copyrig...
Cross site request forgery (csrf)
modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...
CVE-2009-1191
modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...