oracle-xss.txt

Description --------------- There are plenty hundreds of Cross Site Scripting vulnerabilities in the Oracle Portal. The following is one that you may found in any version:...

Oracle Applications/Portal 9i/10g Cross Site Scripting

Description --------------- There are plenty hundreds of Cross Site Scripting vulnerabilities in the Oracle Portal. The following is one that you may found in any version:...

CVE-2003-1171

The CVE-2003-1171 entry describes a heap-based buffer overflow in the sec_filter_out function of mod_security 1.7RC1 through 1.7.1 running on Apache 2, enabling remote code execution when a server-side script sends a large amount of data. Affected component: mod_security (Apache 2 integration). U...

CVE-2003-1171

Heap-based buffer overflow in the secfilterout function in modsecurity 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data...

ModSecurity for Apache vulnerable to off-by-one overflow when directive "SecFilterScanPost" is enabled

Overview A vulnerability in the modsecurity module for Apache may permit a remote attacker to execute arbitrary code on the vulnerable web server. Description ModSecurity is an open source intrusion detection and prevention engine for web applications. The modsecurity module for Apache 2.0.X...

CVE-2003-1171

Heap-based buffer overflow in the secfilterout function in modsecurity 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data...

mod_security buffer overflow

Heap overflow if large amount of data is generated as a single chunk in server side script...

mod_security 1.7RC1 to 1.7.1 vulnerability

Program: modsecurity www.modsecurity.org Versions: 1.7RC1 to 1.7.1 Apache 2 version Synopsis: malloc based buffer overflow Author: Adam Dyga adeonato2.pl, adatadsystems.com.pl URL: http://adsystems.com.pl/adg-modsecurity171.txt Discovered: October 24, 2003 Published: October 28, 2003 Issue: There...