RedHat Security Advisory RHSA-2009:1108

The remote host is missing updates announced in advisory RHSA-2009:1108. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache Portable Runtime APR utility library, a free library of C data structures and...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. OpenVAS Vulnerability Test $Id: fcore20096033.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6033 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:133 (irssi)

The remote host is missing an update to irssi announced via advisory MDVSA-2009:133. OpenVAS Vulnerability Test $Id: mdksa2009133.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:133 irssi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

(GET var 'name') BLIND SQL INJECTION EXPLOIT --FretsWeb 1.2-->

!/usr/bin/python ---------------------------------------------------------------- GET var 'name' BLIND SQL INJECTION EXPLOIT --FretsWeb 1.2-- ---------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/fretsweb/ --DOWNLOAD:...

CVE-2009-2132

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter...

apr security update

CentOS Errata and Security Advisory CESA-2009:1107 Updated apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. apr-util is a utility library...

irssi off-by-one buffer overflow

Off-by-one overflow on server data processing...

Heap overflow

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

DEBIAN-CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

Moderate: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat...

apr-util single NULL byte buffer overflow

Off-by-one error in the aprbrigadevprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service application crash via crafted input...

apr-util single NULL byte buffer overflow

Off-by-one error in the aprbrigadevprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service application crash via crafted input...

VulnCheck KEV: CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

Fedora 11 : perl-5.10.0-69.fc11 (2009-6033)

Off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Ubuntu USN-787-1 (apache2)

The remote host is missing an update to apache2 announced via advisory USN-787-1. OpenVAS Vulnerability Test $Id: ubuntu7871.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7871.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-787-1 apache2 Authors: Thomas...

USN-786-1: apr-util vulnerabilities

Matthew Palmer discovered an underflow flaw in apr-util. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. Applications using libapreq2 are also affected. CVE-2009-0023 It was discovered tha...

LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== LightNEasy sql/no-db new...

FreeBSD Ports: apr

The remote host is missing an update to the system as announced in the referenced advisory. VID eb9212f7-526b-11de-bbf2-001b77d09812 OpenVAS Vulnerability Test $ Description: Auto generated from VID eb9212f7-526b-11de-bbf2-001b77d09812 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...