999 matches found
CVE-2008-5676
Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...
CVE-2008-5676
Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...
Code injection
Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...
CVE-2008-5676
Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...
CVE-2008-5676
ModSecurity (mod_security) for the Apache HTTP Server is affected by CVE-2008-5676. The issue affects ModSecurity versions 2.5.0 through 2.5.5 when SecCacheTransformations is enabled, allowing remote attackers to cause a denial of service (daemon crash) or bypass the product’s functionality via u...
CVE-2007-1359
Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...
Design/Logic Flaw
Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...
CVE-2007-1359
Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...
CVE-2007-1359
ModSecurity (mod_security)
CVE-2007-1359
Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...
Anti-Scanner Defenses (HTTP)
It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...
[Full-disclosure] CastleCops phpBB bbcode Input Validation Disclosure
CASTLECOPS.COM SUMMARY bbcode input validation Severity: High CastleCops: http://castlecops.com/t123194-.html CVE: CAN-2005-1193 phpBB Security ID: 266 Bugtraq ID: 13545 Secunia : 15298 US-CERT VU: 113196 SecurityTracker : 1013918 Vulnerable: viewtopic.php, privmsg.php for phpBB 2.0.14 possible a...
CVE-2004-1765
CVE-2004-1765 describes an off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x when SecFilterScanPost is enabled, allowing remote attackers to execute arbitrary code via crafted POST requests. The OpenVAS and Nessus/OpenVAS-derived feeds corroborate a remote overflow con...
CVE-2004-1765
Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...
CVE-2004-1765
Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...
CVE-2002-1135
The CVE targets modsecurity.php 1.10 and earlier and phpWebSite 0.8.2 and earlier, where an inc_prefix parameter can point to malicious code, allowing remote PHP code execution. The issue is described with an attack vector over the network, with no authentication, and results in partial confident...
FreeBSD : ModSecurity for Apache 2.x remote off-by-one overflow (113)
The following package needs to be updated: modsecurity %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc2e1036877ab11d8b9e800e04ccb0a62.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[Full-Disclosure] ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow
S-Quadra Advisory 2004-03-15 Topic: ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow Severity: Average Vendor URL: http://www.modsecurity.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20040315.txt Release date: 15 Mar 2004 1. DESCRIPTION ModSecurity is an open source intrusi...
