apache http server 2.3.5 vulnerabilities and exploits

(subscribe to this query)

mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 up to and including 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote malicious user...

Apache Http Server 2.2.9 Apache Http Server 2.2.10 Apache Http Server 2.2.11 Apache Http Server 2.2.12 Apache Http Server 2.2.13 Apache Http Server 2.2.14 Apache Http Server 2.2.15 Apache Http Server 2.3.4 Apache Http Server 2.3.5

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 up to and including 2.0.63, 2.2.0 up to and including 2.2.14, and 2.3.x prior to 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISA...

Apache Http Server 2.3.0 Apache Http Server 2.3.1 Apache Http Server 2.3.2 Apache Http Server 2.3.3 Apache Http Server 2.3.4 Apache Http Server 2.3.5 Apache Http Server 2.3.6 Apache Http Server 2.0.9 Apache Http Server 2.0.28 Apache Http Server 2.0.32 Apache Http Server 2.0.34 Apache Http Server 2.0.35

2 EDB exploits

The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...

Apache Struts Ibm Storwize V3500 Firmware 7.7.1.6 Ibm Storwize V3500 Firmware 7.8.1.0 Ibm Storwize V5000 Firmware 7.7.1.6 Ibm Storwize V5000 Firmware 7.8.1.0 Ibm Storwize V7000 Firmware 7.7.1.6 Ibm Storwize V7000 Firmware 7.8.1.0 Lenovo Storage V5030 Firmware 7.7.1.6 Lenovo Storage V5030 Firmware 7.8.1.0 Hp Server Automation 9.1.0 Hp Server Automation 10.0.0 Hp Server Automation 10.1.0

2 EDB exploits2 Nmap scripts84 Github repositories16 Articles

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments a...

Openssl Openssl Stormshield Stormshield Network Security

1 Github repository

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of ...

Openssl Openssl Stormshield Endpoint Security Stormshield Sslvpn Stormshield Stormshield Network Security

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receive...

Openssl Openssl Stormshield Stormshield Management Center

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook