4443 matches found
FreeBSD : Apache APR -- DoS vulnerabilities (99a5590c-857e-11e0-96b7-00300582f9fc)
The Apache Portable Runtime Project reports : A flaw was discovered in the aprfnmatch function in the Apache Portable Runtime APR library 1.4.4 or any backported versions that contained the upstream fix for CVE-2011-0419. This could cause httpd workers to enter a hung state 100% CPU utilization...
CVE-2011-1928
The fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service infinite loop via a URI that does not match unspecified types of wildcard patterns, as demonstrated by...
Apache APR -- DoS vulnerabilities
The Apache Portable Runtime Project reports: Reimplement aprfnmatch from scratch using a non-recursive algorithm; now has improved compliance with the fnmatch spec...
Win32k. sys keyboard layout file to mention the right vulnerability analysis-vulnerability warning-the black bar safety net
Author: Sebastien Renaud Translator: riusksk（springs brother: the http://riusksk.blogbus.com） This article will give you shed some light on the Stuxnet Virus the technical details, mainly aimed at the about the author is how to use 0day vulnerabilities to achieve code versatility. Discussed below...
RedHat Update for apr RHSA-2011:0507-01
Check for the Version of apr OpenVAS Vulnerability Test RedHat Update for apr RHSA-2011:0507-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
CoolPlayer Portable 2.19.2 Buffer Overflow
CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...
DEBIAN-CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
Design/Logic Flaw
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
CoolPlayer Portable 2.19.2 - Local Buffer Overflow
CoolPlayer Portable 2.19.2 - Local Buffer Overflow CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...
CoolPlayer Portable 2.19.2 Buffer Overflow
Exploit for windows platform in category local exploits CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...
CoolPlayer Portable 2.19.2 - Local Buffer Overflow
CoolPlayer+ Portable Buffer Overflow Version: 2.19.2 Author: Securityxxxpert Date Submitted: May 16, 2011 Download Link: http://download.cnet.com/CoolPlayer-Portable/3000-21394-75448619.html Tested on: Windows Xp Sp3 print...
Apache APR 'apr_fnmatch()'拒绝服务漏洞
gtraq ID: 47820 CVE ID：CVE-2011-0419 Apache APR-util是一款可移植运行库，全名为Apache Portable Runtime。 当处理某些模式时"aprfnmatch"函数存在循环递归错误，通过提交包含通配符如""的特制请求时可触发基于栈的溢出 Apache APR 1.x 厂商解决方案 Apache Software Foundation APR 1.4.4 已经修复此漏洞，建议用户下载使用： http://www.apache.org/dist/apr/CHANGES-APR-1.4...
RHEL 4 / 5 / 6 : apr (RHSA-2011:0507)
Updated apr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
Moderate: Red Hat Security Advisory: apr security update
Updated apr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
apr: unconstrained recursion in apr_fnmatch
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv
OpenSSH Security Advisory: portable-keysign-rand-helper.adv This document may be found at: http://www.openssh.com/txt/portable-keysign-rand-helper.adv 1. Vulnerability Portable OpenSSH's ssh-keysign utility may allow unauthorised local access to host keys on platforms if ssh-rand-helper is used. ...
Healthcare Breaches Affect More than 10.8 M
Officials from the Department of Health and Human Services’ Office for Civil Rights have revised their list of healthcare information breaches over the past month to include 16 additional incidents, according to a GovInfoSecurity.com report. The list now totals 265 cases that have affected over...
DEBIAN-CVE-2011-1553
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different...
