221 matches found
Apache 1.3.x < 1.3.41 Multiple Vulnerabilities (DoS, XSS)
According to its banner, the version of Apache 1.3.x running on the remote host is prior to 1.3.41. It is, therefore, affected by multiple vulnerabilities : - A denial of service issue in modproxy when parsing date-related headers. CVE-2007-3847 - A cross-site scripting issue involving modimap...
Apache < 2.0.63 Multiple XSS Vulnerabilities
According to its banner, the version of Apache 2.0.x running on the remote host is prior to 2.0.63. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - A cross-site scripting issue involving modimap. CVE-2007-5000 - A cross-site scripting issue involving 413 error page...
Apache < 2.2.8 Multiple Vulnerabilities
Binary data 4385.prm...
Apache 2.2.x < 2.2.8 Multiple Vulnerabilities (XSS, DoS)
According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.8. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting issue involving modimagemap CVE-2007-5000. - A cross-site scripting issue involving 413 error pages via a...
Fedora 8 : httpd-2.2.8-1.fc8 (2008-1695)
This update includes the latest release of httpd 2.2, which fixes a number of minor security issues and other bugs. A flaw was found in the modimagemap module. On sites where modimagemap was enabled and an imagemap file was publicly available, a cross-site scripting attack was possible...
Fedora 7 : httpd-2.2.8-1.fc7 (2008-1711)
Notes: This update includes the latest release of httpd 2.2, which fixes a number of minor security issues and other bugs. A flaw was found in the modimagemap module. On sites where modimagemap was enabled and an imagemap file was publicly available, a cross-site scripting attack was possible...
Apache multiple security vulnerabilities
modproxybalancer сrossite scripting, crossite requests forgery, memory corruption, DoS, modproxyftp and modstatus, modnegotiation - crossite scripting...
apache mod_status cross-site scripting
Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Moderate: Red Hat Security Advisory: httpd security update
Updated Apache httpd packages that correct several security issues are now available for Red Hat Application Stack v2. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. These...
apache security update
CentOS Errata and Security Advisory CESA-2008:0004-01 Updated apache packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popul...
SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityReason - Apache modstatus Refresh Header - Open Redirector XSS Author: sp3x Date: - - Written: 15.12.2007 - - Public: 15.01.2008 SecurityReason Research SecurityAlert Id: 50 CVE: CVE-2007-6388 SecurityRisk: Low Affected Software: Apache 2.2.x...
httpd, mod_ssl security update
CentOS Errata and Security Advisory CESA-2008:0006 Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...
httpd, mod_ssl security update
CentOS Errata and Security Advisory CESA-2008:0005 Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...
apache mod_status cross-site scripting
Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
apache mod_status cross-site scripting
Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Moderate: Red Hat Security Advisory: httpd security update
Updated Apache httpd packages that correct security issues are now available for Red Hat Application Stack v1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the modimagemap...
apache mod_status cross-site scripting
Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Moderate: Red Hat Security Advisory: httpd security update
Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the modimap...
Moderate: Red Hat Security Advisory: httpd security update
Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the modimap...
apache mod_status cross-site scripting
Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...