< Back to JetLib.com

jetlib.sec » Tags » reverse-proxy

« Expand/Collapse

12 items tagged "reverse proxy"

Related tags: server [+], red hat security [+], red [+], http [+], apache http server [+], denial of service [+], uri [+], security [+], header field [+], service [+], proxy [+], medium security [+], medium [+], full disclosure [+], denial [+], secunia [+], advisory [+]

March 19, 2012
21:06
Secunia Security Advisory 48460
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - demonalex has discovered a vulnerability in at32 Reverse Proxy, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security reverse-proxy denial-of-service

15:30
at32 Reverse Proxy 1.060.310 Denial Of Service
» ‎ Packet Storm Security Exploits

at32 Reverse Proxy version 1.060.310 suffers from multiple HTTP header field denial of service vulnerabilities.
Tags: reverse-proxy denial-of-service header-field

15:30
at32 Reverse Proxy 1.060.310 Denial Of Service
» ‎ Packet Storm Security Recent Files

at32 Reverse Proxy version 1.060.310 suffers from multiple HTTP header field denial of service vulnerabilities.
Tags: denial service proxy reverse-proxy denial-of-service header-field

15:30
at32 Reverse Proxy 1.060.310 Denial Of Service
» ‎ Packet Storm Security Misc. Files

at32 Reverse Proxy version 1.060.310 suffers from multiple HTTP header field denial of service vulnerabilities.
Tags: denial service proxy reverse-proxy denial-of-service header-field

February 21, 2012
18:10
Red Hat Security Advisory 2012-0323-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0323-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red apache-http-server red-hat-security reverse-proxy

18:10
Red Hat Security Advisory 2012-0323-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0323-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red apache-http-server red-hat-security reverse-proxy

18:10
Red Hat Security Advisory 2012-0323-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0323-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red apache-http-server red-hat-security reverse-proxy

February 13, 2012
14:08
Red Hat Security Advisory 2012-0128-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0128-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a specially-crafted URI. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red uri apache-http-server red-hat-security reverse-proxy

14:08
Red Hat Security Advisory 2012-0128-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0128-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a specially-crafted URI. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red uri apache-http-server red-hat-security reverse-proxy

14:08
Red Hat Security Advisory 2012-0128-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0128-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a specially-crafted URI. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red uri apache-http-server red-hat-security reverse-proxy

March 30, 2010
9:00
Bugtraq: Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
» ‎ SecurityFocus Vulnerabilities

Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
Tags: full-disclosure security medium reverse-proxy medium-security
March 29, 2010
13:00
Bugtraq: Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
» ‎ SecurityFocus Vulnerabilities

Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
Tags: full-disclosure security medium reverse-proxy medium-security