security flaw

Cross-site scripting vulnerability in the modssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a...

Important: Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold

Updated versions of the Apache HTTP server, PHP, and modssl are now available which close possible buffer overflows in the Apache HTTP server benchmarking tool, fixes two cross-site scripting vulnerabilities in the error pages, and fix possible local privilege escalation. These updates also fix...

Important: Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold

Updated versions of the Apache HTTP server, PHP, and modssl are now available which close possible buffer overflows in the Apache HTTP server benchmarking tool, fix two cross-site scripting vulnerabilities in the error pages, and fix possible local privilege escalation. These updates also fix...

Important: Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold

Updated versions of the Apache HTTP server, PHP, and modssl are now available which close possible buffer overflows in the Apache HTTP server benchmarking tool, fixes two cross-site scripting vulnerabilities in the error pages, and fix possible local privilege escalation. These updates also fix...

[SECURITY] [DSA 181-1] New mod_ssl packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 181-1 [email protected] http://www.debian.org/security/ Martin Schulze October 22nd, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 181-1] New mod_ssl packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 181-1 [email protected] http://www.debian.org/security/ Martin Schulze October 22nd, 2002 http://www.debian.org/security/faq -...

DSA-181 libapache-mod-ssl - cross site scripting

Bulletin has no description...

Moderate: Red Hat Security Advisory: mod_ssl security update for Stronghold

Updated modssl packages are now available for Stronghold on Red Hat Linux Advanced Server. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure...

Security updates for Slackware 8.1

Several security updates are now available for Slackware 8.1, including updated packages for Apache, glibc, modssl, openssh, openssl, and php. Here are the details from the Slackware 8.1 ChangeLog: ---------------------------- Tue Jul 30 19:45:52 PDT 2002 patches/packages/apache-1.3.26-i386-2.tgz...

Moderate: Red Hat Security Advisory: : : : Updated secureweb packages available

Updated secureweb packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Socke...

security flaw

Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...

Moderate: Red Hat Security Advisory: mod_ssl security update

Updated modssl packages are now available for Red Hat Advanced Server. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL a...

Moderate: Red Hat Security Advisory: : Updated mod_ssl packages available

Updated modssl packages are now available for Red Hat Linux 7, 7.1, 7.2, and 7.3. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets...

CVE-2002-0653

Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...

Apache mod_ssl ssl_compat_directive Function Overflow

The remote host is using a version of modssl that is older than 2.8.10. This version is vulnerable to an off-by-one buffer overflow that could allow a user with write access to .htaccess files to execute arbitrary code on the system with permissions of the web server. Note that several Linux...

Apache mod_ssl off-by-one vulnerability

Product: modssl - http://www.modssl.org/ Date: 06/24/2002 Summary: Off-by-one in modssl 2.4.9 and earlier By: Frank Denis - [email protected] --------------------------------------------------------------------- DESCRIPTION --------------------------------------------------------------------- This...

CVE-2002-0082

CVE-2002-0082 affects mod_ssl and Apache-SSL where memory is not properly initialized during SSL_SESSION serialization (i2d_SSL_SESSION), enabling a remote attacker to trigger a buffer overflow with a large client certificate signed by a trusted CA. This can lead to arbitrary code execution on vu...

CVE-2002-0082

The dbm and shm session cache code in modssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2dSSLSESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed...

CVE-2002-0082: Undefined Security Weakness

The dbm and shm session cache code in modssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2dSSLSESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed...

Re: Another flaw in Apache?

Further investigation show that the flaw is not in Apache itself, but in modssl, so it's probably not an OpenBSD-specific bug. It's just not triggered on systems where modssl isn't compiled in. The overflow is the sslcompatdirective function in src/modules/ssl/sslenginecompat.c . -- /- Frank DENI...