mod ssl vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and previous versions, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.

Modssl Mod Ssl

1 EDB exploit

NA

The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and previous versions does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote malicious users to spoof clients via a crafted certificate.

Apache Mod-gnutls

NA

The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x prior to 7.2(5.12), 8.x prior to 8.2(5.44), 8.3.x prior to 8.3(2.39), 8.4.x prior to 8.4(6), 8.5.x prior to 8.5(1.18), 8.6.x prior to 8.6(1.12), 8.7.x prior to 8.7(1.6), 9.0.x prior to 9.0(2.10)...

Cisco Adaptive Security Appliance Software 7.0\\(5\\)Cisco Adaptive Security Appliance Software 7.0\\(4\\)Cisco Adaptive Security Appliance Software 7.0\\(6\\)Cisco Adaptive Security Appliance Software 7.0\\(6.7\\)Cisco Adaptive Security Appliance Software 7.0\\(8\\)Cisco Adaptive Security Appliance Software 7.0.4.3 Cisco Adaptive Security Appliance Software 7.0.4 Cisco Adaptive Security Appliance Software 7.0\\(1\\)Cisco Adaptive Security Appliance Software 7.0 Cisco Adaptive Security Appliance Software 7.0.1 Cisco Adaptive Security Appliance Software 7.0.7 Cisco Adaptive Security Appliance Software 7.0.2 Cisco Adaptive Security Appliance Software 7.0.1.4 Cisco Adaptive Security Appliance Software 7.0.6 Cisco Adaptive Security Appliance Software 7.0\\(7\\)Cisco Adaptive Security Appliance Software 7.0\\(0\\)Cisco Adaptive Security Appliance Software 7.0\\(5.2\\)Cisco Adaptive Security Appliance Software 7.0\\(2\\)Cisco Adaptive Security Appliance Software 7.0.5 Cisco Adaptive Security Appliance Software 7.0.8 Cisco Adaptive Security Appliance Software 7.2\\(2.48\\)Cisco Adaptive Security Appliance Software 7.1

NA

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 prior to 8.3(2.34), 8.4 prior to 8.4(4.4), 8.5 prior to 8.5(1....

Cisco Adaptive Security Appliance Software 8.3\\(1\\)Cisco Adaptive Security Appliance Software 8.3\\(2\\)Cisco Adaptive Security Appliance Software 8.4 Cisco Adaptive Security Appliance Software 8.4\\(1\\)Cisco Adaptive Security Appliance Software 8.4\\(1.11\\)Cisco Adaptive Security Appliance Software 8.4\\(2\\)Cisco Adaptive Security Appliance Software 8.4\\(2.11\\)Cisco Adaptive Security Appliance Software 8.5 Cisco Adaptive Security Appliance Software 8.5\\(1\\)Cisco Adaptive Security Appliance Software 8.5\\(1.4\\)Cisco Adaptive Security Appliance Software 8.6 Cisco Adaptive Security Appliance Software 8.6\\(1\\)Cisco 5500 Series Adaptive Security Appliance Cisco 7600 Router Cisco Catalyst 6500 Cisco Catalyst 6503-e -Cisco Catalyst 6504-e -Cisco Catalyst 6506-e -Cisco Catalyst 6509-e -Cisco Catalyst 6509-neb-a -Cisco Catalyst 6509-v-e -Cisco Catalyst 6513 -

NA

The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 prior to 8.3(2.25), 8.4 prior to 8.4(2.5), and 8.5 prior to 8.5(1.13) and the Firewall Servic...

NA

The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 prior to 8.3(2.25), 8.4 prior to 8.4(2.5), and 8.5 prior to 8.5(1.13) and the Firewall Servic...

NA

The Cisco Firewall Services Module (FWSM) 4.0 prior to 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote malicious users to cause a denial of service (crash) via a malformed Skinny Client Control ...

Cisco Firewall Services Module 4.0 Cisco Firewall Services Module 4.0\\(4\\)Cisco Firewall Services Module 4.0\\(6\\)

NA

The LAMS module (mod/lams) for Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows malicious users to obtain user account information via unknown vectors.

Moodle Moodle 1.8.4 Moodle Moodle 1.8.5 Moodle Moodle 1.8.7 Moodle Moodle 1.8.8 Moodle Moodle 1.8.1 Moodle Moodle 1.8.3 Moodle Moodle 1.8.9 Moodle Moodle 1.9.2 Moodle Moodle 1.9.3 Moodle Moodle 1.9.4 Moodle Moodle 1.9.5 Moodle Moodle 1.8.2 Moodle Moodle 1.8.10 Moodle Moodle 1.9.1 Moodle Moodle 1.9.6

NA

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 does not properly perform access control, which allows malicious users to read unauthorized Glossary entries via unknown vectors.

Moodle Moodle 1.8.5 Moodle Moodle 1.8.7 Moodle Moodle 1.8.8 Moodle Moodle 1.8.9 Moodle Moodle 1.8.1 Moodle Moodle 1.8.3 Moodle Moodle 1.9.2 Moodle Moodle 1.9.3 Moodle Moodle 1.9.4 Moodle Moodle 1.9.5 Moodle Moodle 1.9.6 Moodle Moodle 1.8.2 Moodle Moodle 1.8.4 Moodle Moodle 1.8.10 Moodle Moodle 1.9.1

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook