an-httpd vulnerabilities and exploits

(subscribe to this query)

NA

AN HTTPD 1.42n, and possibly other versions prior to 1.42p, allows remote malicious users to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.

An An-httpd 1.41c An An-httpd An An-httpd 1.39 An An-httpd 1.40 An An-httpd 1.41 An An-httpd 1.41b An An-httpd 1.2b An An-httpd 1.38

NA

Buffer overflow in AN HTTPd 1.38 up to and including 1.4.1c allows remote malicious users to execute arbitrary code via a SOCKS4 request with a long username.

An An-httpd 1.38 An An-httpd 1.39 An An-httpd 1.41 An An-httpd 1.41c An An-httpd 1.40 An An-httpd 1.41b

1 EDB exploit

NA

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote malicious users to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

An An-httpd 1.42n

1 EDB exploit

NA

Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote malicious users to execute arbitrary code via an HTTP request with a long User-Agent header.

An An-httpd 1.42n

1 EDB exploit

NA

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote malicious users to execute commands via shell metacharacters.

An An-httpd 1.2b

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote malicious users to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.

Nakata An Httpd 1.41d

NA

Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote malicious users to execute arbitrary web script or HTML as other users via a URL containing the script.

An An-http 1.41e

1 EDB exploit

7.5

CVSSv3

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and previous versions.

Apache Http Server Debian Debian Linux 9.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Oracle Http Server 12.2.1.3.0 Oracle Http Server 12.2.1.4.0 Oracle Zfs Storage Appliance Kit 8.8 Apple Macos Apple Mac Os X 10.15.7

9.1

CVSSv3

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and previous versions.

Apache Http Server Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 9.0 Oracle Http Server 12.2.1.3.0 Oracle Http Server 12.2.1.4.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Zfs Storage Appliance Kit 8.8 Apple Mac Os X Apple Mac Os X 10.15.7 Apple Macos

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook