jboss_enterprise_web_server vulnerabilities and exploits

(subscribe to this query)

The mod_proxy_ajp module in the Apache HTTP Server prior to 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote malicious users to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

Apache Http Server Redhat Jboss Enterprise Web Server 1.0.0

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies

Redhat Jboss Community Application Server 7.1.1 Redhat Jboss Enterprise Web Server 1.0.0

protocol.c in the Apache HTTP Server 2.2.x up to and including 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote malicious users to obtain the values of HTTPOnly cookies via vectors involving a (...

Apache Http Server Debian Debian Linux 5.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 11.4 Suse Linux Enterprise Software Development Kit 10 Suse Linux Enterprise Server 10 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Storage 2.0 Redhat Enterprise Linux Eus 6.2 Redhat Jboss Enterprise Web Server 1.0.0

1 EDB exploit3 Github repositories

scoreboard.c in the Apache HTTP Server 2.2.21 and previous versions might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading t...

Apache Http Server Debian Debian Linux 5.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 11.4 Suse Linux Enterprise Software Development Kit 10 Suse Linux Enterprise Server 10 Redhat Jboss Enterprise Web Server 1.0.0 Redhat Enterprise Linux Server Aus 6.2 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Storage 2.0 Redhat Enterprise Linux Eus 6.2

1 EDB exploit

In Apache httpd prior to 2.2.34 and 2.4.x prior to 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '...

1 Github repository

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook