jetlib.sec » Tags » apache-httpd

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "apache httpd"

Related tags: linux security [+], debian linux [+], httpd [+], apache [+], httpd web server [+], excessive cpu usage [+], denial of service attack [+], memory exhaustion [+], denial of service [+], denial [+], windows updates [+], vulnerability [+], vmware workstation [+], vmware [+], vmsa [+], tcp [+], service vulnerability [+], server mod [+], server [+], safer use [+], proxy squid [+], open ssh [+], nmap [+], multiple os [+], mod [+], memory consumption [+], jeff trawick [+], ipv [+], dsa [+], code [+], cisco security advisory [+], cisco security [+], security [+], advisory [+], debian [+]

• September 06, 2011
• 17:26

  Debian Security Advisory 2298-2

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2298-2 - The apache2 upgrade from DSA-2298-1 has caused a regression that prevented some video players from seeking in video files served by Apache HTTPD. This update fixes this bug.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• 17:26

  Debian Security Advisory 2298-2

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2298-2 - The apache2 upgrade from DSA-2298-1 has caused a regression that prevented some video players from seeking in video files served by Apache HTTPD. This update fixes this bug.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• 17:26

  Debian Security Advisory 2298-2

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2298-2 - The apache2 upgrade from DSA-2298-1 has caused a regression that prevented some video players from seeking in video files served by Apache HTTPD. This update fixes this bug.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• August 30, 2011
• 13:00

  Bugtraq: Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability

  Tags:  advisory httpd apache cisco-security cisco-security-advisory service-vulnerability apache-httpd  

• 7:42

  Debian Security Advisory 2298-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2298-1 - Two issues have been found in the Apache HTTPD web server.

  Tags:  advisory debian security httpd-web-server apache-httpd linux-security  

• 7:42

  Debian Security Advisory 2298-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2298-1 - Two issues have been found in the Apache HTTPD web server.

  Tags:  advisory debian security httpd-web-server apache-httpd linux-security  

• 7:42

  Debian Security Advisory 2298-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2298-1 - Two issues have been found in the Apache HTTPD web server.

  Tags:  advisory debian security httpd-web-server apache-httpd linux-security  

• August 19, 2011
• 16:58

  Apache httpd Remote Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Apache httpd remote denial of service memory exhaustion exploit.

  Tags:  denial httpd apache memory-exhaustion apache-httpd denial-of-service  

• 16:58

  Apache httpd Remote Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Apache httpd remote denial of service memory exhaustion exploit.

  Tags:  denial httpd apache memory-exhaustion apache-httpd denial-of-service  

• May 15, 2011
• 13:49

  Debian Security Advisory 2237-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2237-1 - A flaw was found in the APR library, which could be exploited through Apache HTTPD's mod_autoindex. If a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.

  Tags:  advisory debian security excessive-cpu-usage apache-httpd denial-of-service-attack  

• 13:49

  Debian Security Advisory 2237-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2237-1 - A flaw was found in the APR library, which could be exploited through Apache HTTPD's mod_autoindex. If a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.

  Tags:  advisory debian security excessive-cpu-usage apache-httpd denial-of-service-attack  

• 13:49

  Debian Security Advisory 2237-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2237-1 - A flaw was found in the APR library, which could be exploited through Apache HTTPD's mod_autoindex. If a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.

  Tags:  advisory debian security excessive-cpu-usage apache-httpd denial-of-service-attack  

• March 24, 2011
• 7:55

  Debian Security Advisory 2202-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2202-1 - MPM_ITK is an alternative Multi-Processing Module for Apache HTTPD that is included in Debian's apache2 package.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• 7:55

  Debian Security Advisory 2202-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2202-1 - MPM_ITK is an alternative Multi-Processing Module for Apache HTTPD that is included in Debian's apache2 package.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• 7:55

  Debian Security Advisory 2202-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2202-1 - MPM_ITK is an alternative Multi-Processing Module for Apache HTTPD that is included in Debian's apache2 package.

  Tags:  advisory debian security apache-httpd linux-security debian-linux  

• October 05, 2010
• 17:10

  dsa-2117-1.txt

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2117-1 - APR-util is part of the Apache Portable Runtime library which is used by projects such as Apache httpd and Subversion. Jeff Trawick discovered a flaw in the apr_brigade_split_line() function in apr-util. A remote attacker could send crafted http requests to cause a greatly increased memory consumption in Apache httpd, resulting in a denial of service.

  Tags:  dsa httpd apache jeff-trawick memory-consumption apache-httpd  

• September 25, 2010
• 14:00

  VMSA-2010-0014.txt

   » ‎ Packet Storm Security Advisories
  VMware Security Advisory - VMware Workstation and Player address a potential installer security issue and security issues in libpng. VMware ACE Management Server (AMS) for Windows updates Apache httpd.

  Tags:  vmware vmsa security apache-httpd vmware-workstation windows-updates  

• August 02, 2010
• 7:35

  Scanning IPv6 Enabled Hosts

   » ‎ Carnal0wnage
  Nmap will scan IPv6 enabled hosts if you pass it the -6 switch, but only does TCP Connect scans and no OS identification, which makes sense because OS identification uses nuances of ipv4 responses...
  
  carnal0wnage ~: nmap -6 -sV 2002:53e9:a52a::832:3316:5042 -p53,80,222
  
  Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-19 20:42 UTC
  Nmap scan report for 2002:53e9:a52a::832:3316:5042
  Host is up (0.17s latency).
  PORT STATE SERVICE VERSION
  53/tcp open domain ISC BIND 9.X
  80/tcp open http nginx
  222/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0)
  Service Info: OS: Linux
  
  Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
  Nmap done: 1 IP address (1 host up) scanned in 6.92 seconds
  
  
  carnal0wnage ~: nmap -6 -sV ::ffff:66.148.86.4
  
  Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-19 21:00 UTC
  Nmap scan report for ::ffff:66.148.86.4
  Host is up (0.024s latency).
  Not shown: 795 closed ports, 203 filtered ports
  PORT STATE SERVICE VERSION
  80/tcp open http Apache httpd 1.3.41 ((Unix) PHP/5.2.9)
  8080/tcp open http-proxy Squid webproxy 2.6.STABLE16
  
  Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
  Nmap done: 1 IP address (1 host up) scanned in 11.41 seconds
  
  
  and metasploit supports ipv6
  
  msf auxiliary(http_version) > run
  
  [*] 2002:53e9:a52a:0000:0000:0832:3316:5042 is running nginx
  [*] Scanned 1 of 1 hosts (100% complete)
  [*] Auxiliary module execution completed

  Tags:  tcp nmap ipv open-ssh proxy-squid apache-httpd  

• July 13, 2010
• 18:36

  Multiple OS Apache httpd Timeout Detection Flaw Vulnerability

   » ‎ SecuriTeam
  A vulnerability was discovered affecting Apache httpd running on Netware, Windows or OS2 with proxy worker pools enabled.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  vulnerability httpd apache apache-httpd safer-use multiple-os  

• April 19, 2010
• 14:00

  dsa-2035-1.txt

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2035-1 - Two issues have been found in the Apache HTTPD web server. mod_proxy_ajp would return the wrong status code if it encountered an error, causing a backend server to be put into an error state until the retry timeout expired. A remote attacker could send malicious requests to trigger this issue, resulting in denial of service. A flaw in the core subrequest process code was found, which could lead to a daemon crash (segfault) or disclosure of sensitive information if the headers of a subrequest were modified by modules such as mod_headers.

  Tags:  code server mod httpd-web-server apache-httpd server-mod