Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 79

Export CSV
CVE-2008-1676

System: incorrect handling of Extensions in CSRs (cs71)

Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Netscape Redhat
Products
Certificate Management System Certificate System
CVE-2008-1927

perl: heap corruption by regular expressions with utf8 characters

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Perl Redhat
Products
Perl Certificate System Enterprise Linux and 1 more
CVE-2008-2364

httpd: mod_proxy_http DoS via excessive interim responses from the origin server

The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 6 more
CVE-2008-2367

System: insecure config file permissions

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Certificate System
CVE-2008-2368

System: plain text passwords stored in debug log

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Certificate System
CVE-2008-2370

tomcat RequestDispatcher information disclosure vulnerability

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

CVSS 2.0 · 5.0 Medium EPSS 52.7% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2008-5082

System: missing public key challenge proof verification in the TPS component

The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key.

CVSS 2.0 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Dogtag Certificate System Certificate System
CVE-2008-5515

tomcat request dispatcher information disclosure vulnerability

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.

CVSS 2.0 · 5.0 Medium EPSS 18.7% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 5 more
CVE-2009-0023

apr-util heap buffer underwrite

The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.

CVSS 2.0 · 4.3 Medium EPSS 8.5% KEV · Not listed
Vendors
Apache Redhat
Products
Apr-util Http Server Certificate System and 2 more
CVE-2009-0033

tomcat6 Denial-Of-Service with AJP connection

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.

CVSS 2.0 · 5.0 Medium EPSS 10.1% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2009-0580

tomcat6 Information disclosure in authentication classes

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.

CVSS 2.0 · 4.3 Medium EPSS 94.4% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 5 more
CVE-2009-0588

rhpki-ra: improper authorization checks in Cerificate System's Registration Authority

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

CVSS 2.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Certificate System Dogtag Certificate System
CVE-2009-1891

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

CVSS 2.0 · 7.1 High EPSS 17.1% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Http Server Ubuntu Linux Debian Linux and 9 more
CVE-2009-1955

apr-util billion laughs attack

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

CVSS 3.1 · 7.5 High EPSS 53.0% KEV · Not listed
Vendors
Apache Apple Canonical and 5 more
Products
Apr-util Http Server Mac Os X and 8 more
CVE-2009-1956

apr-util single NULL byte buffer overflow

Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.

CVSS 2.0 · 6.4 Medium EPSS 12.0% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Apr-util Http Server Ubuntu Linux and 2 more
CVE-2009-2412

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 10.0 Critical EPSS 13.8% KEV · Not listed
Vendors
Apache Redhat
Products
Apr-util Portable Runtime Certificate System and 2 more
CVE-2009-3094

httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.

CVSS 2.0 · 2.6 Low EPSS 8.6% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 1 more
Products
Http Server Debian Linux Fedora and 3 more
CVE-2009-3095

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed
Vendors
Apache Apple Debian and 4 more
Products
Http Server Mac Os X Debian Linux and 7 more
CVE-2008-2939

httpd: mod_proxy_ftp globbing XSS

Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.

CVSS 2.0 · 4.3 Medium EPSS 39.0% KEV · Not listed
Vendors
Apache Apple Canonical and 2 more
Products
Http Server Mac Os X Ubuntu Linux and 3 more
CVE-2006-5752

httpd mod_status XSS

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVSS 2.0 · 4.3 Medium EPSS 27.8% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 9 more