371 matches found
Design/Logic Flaw
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...
CVE-2019-15770
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...
python-oauth2: _check_signature() ignores the nonce value when validating signed urls
It was found that python-oauth2 did not properly verify the nonce of a signed URL. An attacker able to capture network traffic of a website using OAuth2 authentication could use this flaw to conduct replay attacks against that website...
httpd mod_digest nonce not verified
moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret...
Moderate: Red Hat Security Advisory: apache, mod_ssl security update
Updated apache and modssl packages that fix various minor security issues and bugs in the Apache Web server are now available for Red Hat Enterprise Linux 2.1. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. The modssl module provides strong...
Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2004:046-1)
Four security vulnerabilities were fixed with the 1.3.31 release of Apache. All of these issues have been backported and applied to the provided packages. Thanks to Ralf Engelschall of OpenPKG for providing the patches. Apache 1.3 prior to 1.3.30 did not filter terminal escape sequences from its...
Apache 1.3: Multiple vulnerabilities
Background The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards. Description On...
CVE-2003-0987
moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret...
CVE-2003-0987
moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret...
CVE-2003-0987
CVE-2003-0987 affects Apache’s mod_digest prior to 1.3.31, where nonce verification using an AuthNonce secret can enable a replay attack. Affected component: mod_digest in the Apache HTTP Server. Root cause: improper nonce validation allows interception and replay of Digest authentication sequenc...