Page 62 of 315 results (0.011 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods. • http://www.securityfocus.com/archive/1/14384 https://exchange.xforce.ibmcloud.com/vulnerabilities/2272 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 1

A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes. • https://www.exploit-db.com/exploits/19244 http://www.securityfocus.com/archive/1/14215 http://www.securityfocus.com/bid/306 •

CVSS: 5.0EPSS: 2%CPEs: 2EXPL: 1

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server. • https://www.exploit-db.com/exploits/19253 http://www.securityfocus.com/bid/318 •

CVSS: 10.0EPSS: 2%CPEs: 1EXPL: 0

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability. • http://marc.info/?l=bugtraq&m=90252779826784&w=2 http://marc.info/?l=bugtraq&m=90276683825862&w=2 http://marc.info/?l=bugtraq&m=90280517007869&w=2 http://marc.info/?l=bugtraq&m=90286768232093&w=2 http://www.redhat.com/support/errata/rh51-errata-general.html#apache https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E •

CVSS: 5.0EPSS: 0%CPEs: 9EXPL: 1

Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters. • https://www.exploit-db.com/exploits/20558 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107 •