apache http server 2.2.7 vulnerabilities and exploits

(subscribe to this query)

The Apache HTTP Server 2.2.11 and previous versions 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC ...

Apache Http Server 2.2.0 Apache Http Server 2.2.1 Apache Http Server 2.2.2 Apache Http Server 2.2.3 Apache Http Server 2.2.4 Apache Http Server 2.2.7 Apache Http Server 2.2.8 Apache Http Server 2.2.9 Apache Http Server 2.2.10

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 up to and including 2.0.63, 2.2.0 up to and including 2.2.14, and 2.3.x prior to 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISA...

Apache Http Server 2.3.0 Apache Http Server 2.3.1 Apache Http Server 2.3.2 Apache Http Server 2.3.3 Apache Http Server 2.3.4 Apache Http Server 2.3.5 Apache Http Server 2.3.6 Apache Http Server 2.0.9 Apache Http Server 2.0.28 Apache Http Server 2.0.32 Apache Http Server 2.0.34 Apache Http Server 2.0.35

2 EDB exploits

Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x prior to 2.2.7-dev, when running on Windows, allows remote malicious users to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue

Apache Http Server -Apache Http Server 2.2.2 Apache Http Server 2.2.3 Apache Http Server 2.2.4 Apache Http Server 2.2.6

mod_proxy_ftp in Apache 2.2.x prior to 2.2.7-dev, 2.0.x prior to 2.0.62-dev, and 1.3.x prior to 1.3.40-dev does not define a charset, which allows remote malicious users to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

Apache Http Server Fedoraproject Fedora 7 Fedoraproject Fedora 8 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 6.10 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 7.10

In libexpat in Expat prior to 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).

Libexpat Project Libexpat Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 19.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Leap 15.0

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This ...

Openssl Openssl Stormshield Stormshield Management Center Stormshield Stormshield Network Security

1 Github repository

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments a...

Openssl Openssl Stormshield Stormshield Network Security

1 Github repository

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of ...

Openssl Openssl Stormshield Endpoint Security Stormshield Sslvpn Stormshield Stormshield Network Security

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receive...

Openssl Openssl Stormshield Stormshield Management Center

1 Github repository

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather t...

* Https //github.com/curl/curl Haxx Curl Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Clustered Data Ontap -Netapp Ontap Antivirus Connector -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Apple Macos

1 Github repository

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook