Cisco Security Advisory - Many IOS and CatOS releases contain several independent but related vulnerabilities involving the unexpected creation and exposure of SNMP community strings. These vulnerabilities can be exploited to permit the unauthorized viewing or modification of affected devices. To fix, install the free upgrade or block UDP port 161.
1a553bc9b32c2682597b80da1cf16f0ec9cbf9029a6a1ac3286ac73e4b2d0719
mod_ssl provides provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1). It is based on the SSL/TLS toolkit OpenSSL and supports all SSL/TLS related functionality, including RSA and DSA/DH cipher support, X.509 CRL checking, etc. Additionally it provides special Apache related facilities like DBM and shared memory based inter-process SSL session caching. per-URL SSL session renegotiations, DSO support, etc.
77e2832f865a856e97210c19577a216c44abc35981f9d4e4f90c7137271555e4
Apache-SSL is a set of patches for Apache to create a secure Webserver, based on SSLeay/OpenSSL. It is designed to be small, secure, and efficient.
0ecd3792bb766e57f3f8a0b444dd033ac6afe83cb1d4658307e65ecdb6037c43
CERT Quarterly Summary for February, 2001 - Since the last regularly scheduled CERT summary, issued in November 2000, bugs in BIND TSIG and LPRng have began to be used on a large scale, while rpc.statd and FTPD continue to be exploited. A new Vulnerability Notes database has been started.
fe50242a328ecc66210ff9c70c8c7c8235963c7b3c118a3f1dbf25678c5876c5
FreeVSD facilitates true Linux Virtual Servers within a 'chroot' environment, allowing Web servers and other applications to be deployed and administered discretely, without compromise to security. Each Virtual Server has its own IP address(es), Apache webserver, and view of the process table. FreeVSD expands the Linux system by creating a pseudo-'super user' (admin) for each Virtual Server. The admin user has the ability to create extra POP3/FTP and Telnet users and also administrate vital services such as the webserver.
43e93d8d819ede4ec7a78f17385e4e5cac50cf029e2dcface88ceaacd6123453
FreeBSD 3.5.1 and 4.2 ja-elvis and ko-helvis (ports packages) local root exploit. Both come with a utility called elvrec that is installed suid root by default.
7c88100f599842056224afe39698572f91d9ba0b60da1ce3bee4d4c02ae4b7e3
A quick fix against RFP2101 - PHP-Nuke v4.4 and below allows users to steal accounts via sql hacking.
639d6d1811b57d832ff7d2af027ae6435b390d7af484799883c2ef25deafedf7