Mandriva Update for apr-util MDVSA-2010:192 (apr-util)

Check for the Version of apr-util OpenVAS Vulnerability Test Mandriva Update for apr-util MDVSA-2010:192 apr-util Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for apr-util MDVSA-2010:192 (apr-util)

Check for the Version of apr-util OpenVAS Vulnerability Test Mandriva Update for apr-util MDVSA-2010:192 apr-util Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

DSA-2117-1 apr-util - denial of service

Bulletin has no description...

apr -- multiple vunerabilities

Secunia reports: Multiple vulnerabilities have been reported in APR-util, which can be exploited by malicious people to cause a DoS Denial of Service. Two XML parsing vulnerabilities exist in the bundled version of expat. An error within the "aprbrigadesplitline" function in buckets/aprbrigade.c...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

apr-util billion laughs attack

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

horde-base -- XSS and CSRF vulnerabilities

The Horde team reports: Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. Thanks to Secunia for releasing an advisory for the new CSRF protection in the preference interface The major changes compared to Horde version 3.3.8 are: Fixed XSS vulnerability in...

Apache Httpd < 2.2.17 : apr_bridage_split_line DoS

A flaw was found in the aprbrigadesplitline function of the bundled APR-util library, used to process non-SSL requests. A remote attacker could send requests, carefully crafting the timing of individual bytes, which would slowly consume memory, potentially leading to a denial of service...

Apache Httpd < 2.0.64 : apr_bridage_split_line DoS

A flaw was found in the aprbrigadesplitline function of the bundled APR-util library, used to process non-SSL requests. A remote attacker could send requests, carefully crafting the timing of individual bytes, which would slowly consume memory, potentially leading to a denial of service...

Debian DSA-1854-1 : apr, apr-util - heap buffer overflow

Matt Lewis discovered that the memory management code in the Apache Portable Runtime APR library does not guard against a wrap-around during size computations. This could cause the library to return a memory area which smaller than requested, resulting a heap overflow and possibly arbitrary code...

CentOS 5 : apr-util (CESA-2009:1107)

Updated apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. apr-util is a utility library used with the Apache Portable Runtime APR. It aims...

CentOS 5 : apr (CESA-2009:1204)

Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable Runtime APR is a portability library used by the...

apache-APR-util 1.3.4 缓冲区溢出

No description provided by source...

WebSphere 7.05 APR-util apr_strmatch_precompile 导致整形下溢漏洞

No description provided by source...

WebSphere 7.05 APR-util xml-apr_xml.c 导致拒绝服务攻击漏洞

No description provided by source...

Fedora Core 12 FEDORA-2009-12968 (nss-util)

The remote host is missing an update to nss-util announced via advisory FEDORA-2009-12968. OpenVAS Vulnerability Test $Id: fcore200912968.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12968 nss-util Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 12 FEDORA-2009-12968 (nss-util)

The remote host is missing an update to nss-util announced via advisory FEDORA-2009-12968. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

[SECURITY] Fedora 12 Update: nss-util-3.12.5-1.fc12.1

Utilities for Network Security Services and the Softoken module...

Mandriva Security Advisory MDVSA-2009:314 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:314. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Fedora 12 : nss-util-3.12.5-1.fc12.1 (2009-12968)

Update to 3.12.5 This update fixes the following security flaw: CVE-2009-3555 TLS: MITM attacks via session renegotiation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...