676 matches found
CVE-2004-0751: Undefined Security Weakness
The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...
CVE-2004-0748: Loop with Unreachable Exit Condition
modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...
Apache mod_ssl 2.0.x - Remote Denial of Service
source: https://www.securityfocus.com/bid/11154/info Apache 2.x modssl is reported prone to a remote denial of service vulnerability. This issue likely exists because the application fails to handle exceptional conditions. The vulnerability originates in the 'charbufferread' function of the...
RHEL 2.1 : mod_ssl (RHSA-2004:408)
An updated modssl package for Apache that fixes a format string vulnerability is now available. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. A format string issue was discovered in modssl for...
Important: Red Hat Security Advisory: mod_ssl security update
An updated modssl package for Apache that fixes a format string vulnerability is now available. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. A format string issue was discovered in modssl for...
SUSE-SA:2004:030: apache2
The remote host is missing the patch for the advisory SUSE-SA:2004:030 apache2. The modssl apache module, as part of our apache2 package, enables the apache webserver to handle the HTTPS protocol. Within the modssl module, two Denial of Service conditions in the input filter have been found. The...
Apache mod_ssl DoS
Child process goes to infinite loop on SSL connection abort...
[SA12434] Apache 2 mod_ssl Connection Abort Denial of Service
TITLE: Apache 2 modssl Connection Abort Denial of Service SECUNIA ADVISORY ID: SA12434 VERIFY ADVISORY: http://secunia.com/advisories/12434/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Apache 2.0.x http://secunia.com/product/73/ DESCRIPTION: A vulnerability has been reported ...
Important: Red Hat Security Advisory: httpd security update
Updated httpd packages that include a security fix for modssl and various enhancements are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An input filter bug in modssl was discovered in Apache httpd version 2.0.50 and earlier. A...
CVE-2002-1157
CVE-2002-1157 describes a Cross-site scripting vulnerability in the Apache mod_ssl module (versions 2.8.9 and earlier). The issue occurs when UseCanonicalName is Off and wildcard DNS is enabled, allowing a remote attacker to cause the server name in an HTTPS response to be used in a self-referenc...
CVE-2004-0113
Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...
CVE-2002-1157
Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...
CVE-2002-1157: Undefined Security Weakness
Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...
CVE-2004-0113: Undefined Security Weakness
Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...
RHEL 3 : httpd (RHSA-2004:349)
Updated httpd packages that include a security fix for modssl and various enhancements are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An input filter bug in modssl was discovered in Apache httpd version 2.0.50 and earlier. A...
GLSA-200407-18 : mod_ssl: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200407-18 modssl: Format string vulnerability A bug in sslengineext.c makes modssl vulnerable to a ssllog related format string vulnerability in the modproxy hook functions. Impact : Given the right server configuration, an attack...
Apache HTTP Server < 2.0.49 mod_ssl Plain HTTP Request DoS
Binary data 1205.prm...
Apache-SSL < 1.47 mod_ssl i2d_SSL_SESSION Function Overflow
Binary data 1496.prm...