jetlib.sec » Tags » proxy-module

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

10 items tagged "proxy module"

Related tags: mod [+], apache [+], ubuntu [+], external exposure [+], apache http server [+], vulnerability [+], uri [+], stefano nichele [+], proof of concept [+], denial of service [+], security [+], proxy [+]

• February 16, 2012
• 18:34

  Ubuntu Security Notice USN-1368-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1368-1 - It was discovered that the Apache HTTP Server incorrectly handled the SetEnvIf .htaccess file directive. An attacker having write access to a .htaccess file may exploit this to possibly execute arbitrary code. Prutha Parikh discovered that the mod_proxy module did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Various other issues were also addressed.

  Tags:  ubuntu proxy security apache-http-server external-exposure proxy-module  

• November 10, 2011
• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• 19:11

  Ubuntu Security Notice USN-1259-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1259-1 - It was discovered that the mod_proxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Stefano Nichele discovered that the mod_proxy_ajp module in Apache when used with mod_proxy_balancer in certain configurations could allow remote attackers to cause a denial of service via a malformed HTTP request. Various other issues were also addressed.

  Tags:  ubuntu mod proxy stefano-nichele external-exposure denial-of-service proxy-module  

• October 10, 2011
• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Exploits
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Recent Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• 18:06

  Apache mod_proxy Proof Of Concept

   » ‎ Packet Storm Security Misc. Files
  The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.

  Tags:  mod proxy apache uri apache-http-server proof-of-concept proxy-module  

• October 05, 2011
• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Advisories
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Recent Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability  

• 18:36

  Apache mod_proxy Reverse Proxy Exposure

   » ‎ Packet Storm Security Misc. Files
  The Apache mod_proxy module suffers from a reverse proxy exposure vulnerability.

  Tags:  mod proxy apache proxy-module vulnerability