516 matches found
Apache: multiple buffer overflows
Background The Apache HTTP Server is one of the most popular web servers on the Internet. Description Multiple stack-based buffer overflows in modalias and modrewrite allow attackers who can create or edit configuration files including .htaccess files, to cause a denial of service and execute...
Apache 2.0.x < 2.0.48 Multiple Vulnerabilities (OF, Info Disc.)
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.48. It is, therefore, affected by multiple vulnerabilities : - The modrewrite and modalias modules fail to handle regular expressions containing more than 9 captures resulting in a buffer overflow. - A vulnerability may...
Apache Httpd < 2.0.48 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
Apache Httpd < 1.3.29 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
CVE-2000-1206
CVE-2000-1206 describes a vulnerability in Apache httpd prior to 1.3.11 where mass virtual hosting using mod_rewrite or mod_vhost_alias (in Apache 1.3.9) can allow remote attackers to retrieve arbitrary files. The affected component is the httpd web server and its name-based hosting configuration...
CVE-2001-1072
CVE-2001-1072 affects Apache with mod_rewrite enabled on UNIX systems. The vulnerability arises when an attacker can insert extra / characters into the requested path, causing the RewriteRule’s regular expression to fail and allowing the path to bypass RewriteRules. The affected component is mod_...
CVE-2001-1072
Apache with modrewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / slash characters into the requested path, which causes the regular expression in the RewriteRule to fail...
CVE-2001-1072
Apache with modrewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / slash characters into the requested path, which causes the regular expression in the RewriteRule to fail...
[SECURITY] [DSA 021-1] New version of Apache released
---------------------------------------------------------------------------- Debian Security Advisory DSA-021-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26, 2001 - ---------------------------------------------------------------------------- Package : apache...
CVE-2000-0913
The CVE-2000-0913 issue affects the Apache web server module mod_rewrite. It enables a remote attacker to read arbitrary files when a RewriteRule directive expands to a filename containing a regular expression, as described for Apache 1.3.12 and earlier. Connected sources corroborate that this is...
CVE-2000-0913
modrewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression...
CVE-2000-0913
modrewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression...
Apache Httpd < 1.3.14 : Rewrite rules that include references allow access to any file
The Rewrite module, modrewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in RewriteRule directives: If the destination of a RewriteRule contains regular expression references then an attacker...
Linux news 9.10.00
Linus: Linux Kernel 2.4 задерживается. Опять... Пришло сообщение о том, что ядро Linux 2.4 задерживается как минимум еще на два месяца... Подробнее: http://slashdot.org/articles/00/10/06/2053240.shtml Snes9x 1.32 Вышла новая версия Super Nintendo Entertainment System SNES emulator-а - Snes9x 1.32...
Дырка в Apache (mod_rewrite)
При использовании modrewrite если результат RewriteRul содержит шаблоны файлов, то атакующий может обратиться к любому файлу в системе...
Apache Httpd < 1.3.11 : Mass virtual hosting security issue
A security problem can occur for sites using mass name-based virtual hosting using the new modvhostalias module or with special modrewrite rules...