Test Blog: Apache

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwKce3ai-qfZ9pds1_RzyaP3qjt-vPIkoBkISvSuom4khyphenhyphen24auirWLGy2fY49xeeaC3eDbPNuj7qxgkLAASdDWmqwE1RrnIkqeYsmTBcuNoE1lz2V1V52KuB_jP4UMpePscPC7nKlO4a9K/s1600/android-kitkat-vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="470" data-original-width="750" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwKce3ai-qfZ9pds1_RzyaP3qjt-vPIkoBkISvSuom4khyphenhyphen24auirWLGy2fY49xeeaC3eDbPNuj7qxgkLAASdDWmqwE1RrnIkqeYsmTBcuNoE1lz2V1V52KuB_jP4UMpePscPC7nKlO4a9K/s640/android-kitkat-vulnerability.png" width="640" /></a></div>
<div class="page-generator__output js-generator-output" id="output">
Lorem
 ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod 
tempor incididunt ut labore et dolore magna aliqua. Consequat interdum 
varius sit amet mattis vulputate enim nulla aliquet. Est ante in nibh 
mauris cursus mattis. Sed tempus urna et pharetra pharetra massa massa 
ultricies. Non diam phasellus vestibulum lorem sed risus. Lorem mollis 
aliquam ut porttitor leo. Aliquet nec ullamcorper sit amet risus nullam 
eget felis. Diam volutpat commodo sed egestas egestas. Ut faucibus 
pulvinar elementum integer enim neque volutpat. Cursus turpis massa 
tincidunt dui ut ornare. Amet purus gravida quis blandit turpis cursus 
in hac. Accumsan in nisl nisi scelerisque eu ultrices vitae auctor eu.<br />

Netus et malesuada fames ac turpis egestas. Mattis pellentesque id 
nibh tortor id aliquet lectus proin. Facilisis sed odio morbi quis 
commodo odio aenean sed. Quam lacus suspendisse faucibus interdum 
posuere lorem ipsum dolor sit. Tempor id eu nisl nunc mi ipsum faucibus.
 Eleifend quam adipiscing vitae proin sagittis nisl. Enim ut sem viverra
 aliquet eget sit amet. Nibh praesent tristique magna sit amet purus. 
Sit amet venenatis urna cursus eget nunc scelerisque. Dignissim 
suspendisse in est ante in. Imperdiet proin fermentum leo vel orci porta
 non pulvinar neque. Tincidunt dui ut ornare lectus sit amet est. Lectus
 mauris ultrices eros in. Tincidunt eget nullam non nisi est. Leo urna 
molestie at elementum eu facilisis sed. Convallis aenean et tortor at 
risus viverra adipiscing at.<br />

Mauris rhoncus aenean vel elit scelerisque mauris pellentesque 
pulvinar pellentesque. Nulla porttitor massa id neque aliquam vestibulum
 morbi blandit. Phasellus vestibulum lorem sed risus. Non arcu risus 
quis varius quam quisque id diam vel. Consectetur adipiscing elit 
pellentesque habitant morbi. Cras pulvinar mattis nunc sed blandit 
libero volutpat. Vestibulum sed arcu non odio euismod. Hendrerit gravida
 rutrum quisque non tellus. Dui id ornare arcu odio ut sem. Quam viverra
 orci sagittis eu volutpat odio. Fusce ut placerat orci nulla 
pellentesque dignissim enim sit. Fames ac turpis egestas maecenas 
pharetra convallis. Placerat orci nulla pellentesque dignissim. Nunc sed
 velit dignissim sodales ut eu. Ullamcorper velit sed ullamcorper morbi 
tincidunt. Elementum facilisis leo vel fringilla est ullamcorper.</div>
<br /></div>

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Consequat ...

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "Arial", "Tahoma", "Helvetica", "FreeSans", sans-serif; font-size: 13px; line-height: 18px;"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP5g-MkNaBkWxG7VTGSu1vUYHrU0HO-YzgblXPtmYxDNsmniEacgVYA4MiqdbufPP_ecLUfUNWA78IE6fYqz6cpU1e7JfqGqSxiQAxSNlXcVkWhKmuXWqDiGmiTu3UOZA8eLD6ul7tohnr/s1600/apache_vulnerability_dos.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP5g-MkNaBkWxG7VTGSu1vUYHrU0HO-YzgblXPtmYxDNsmniEacgVYA4MiqdbufPP_ecLUfUNWA78IE6fYqz6cpU1e7JfqGqSxiQAxSNlXcVkWhKmuXWqDiGmiTu3UOZA8eLD6ul7tohnr/s1600/apache_vulnerability_dos.png" /></a></div><h3 class="post-title entry-title" style="color: #444444; font-family: "Arial", "Tahoma", "Helvetica", "FreeSans", sans-serif; font-size: 22px; font-style: normal; font-variant: normal; font-weight: 700; line-height: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; position: relative;"></h3><h3 class="post-title entry-title" style="color: #444444; font-family: "Arial", "Tahoma", "Helvetica", "FreeSans", sans-serif; font-size: 22px; font-style: normal; font-variant: normal; font-weight: 700; line-height: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; position: relative;">Apache Vulnerability: Hack Apache based Web Servers</h3><div class="post-header" style="line-height: 1.6; margin-bottom: 1em; margin-left: 0px; margin-right: 0px; margin-top: 0px;"><div class="post-header-line-1"></div></div><div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;"><span id="6923457550510159231"><div><span class="sidebar-title"><b><center>Apache Vulnerability</center></b></span><br /><br /><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin-bottom: 0.5em; margin-left: 0px; margin-right: 0px; margin-top: 0.5em; padding-bottom: 0px; padding-left: 2.5em; padding-right: 2.5em; padding-top: 0px;"><li class="first-listitem" style="border-bottom-color: transparent; border-bottom-style: none; border-bottom-width: 1px; border-left-style: none; border-right-style: none; border-top-style: none; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">The Apache Week tracks the vulnerabilities in Apache Server. Even Apache  has its share of bugs and fixes.</div></li><li class="listitem" style="border-bottom-style: none; border-left-style: none; border-right-style: none; border-top-color: rgb(238, 238, 238); border-top-style: none; border-top-width: 1px; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">For instance, consider the vulnerability which was found in the Win32 port of Apache 1.3.20.</div><ul class="simple-list" style="line-height: 1.4; list-style-type: disc; margin-bottom: 0.5em; margin-left: 0px; margin-right: 0px; margin-top: 0.5em; padding-bottom: 0px; padding-left: 2.5em; padding-right: 2.5em; padding-top: 0px;"><li class="first-listitem" style="border-bottom-style: none; border-left-style: none; border-right-style: none; border-top-style: none; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">Long URLs passing through the mod_negative, mod_dir and mode_autoindex modules could cause Apache to list directory contents.</div></li></ul><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin-bottom: 0.5em; margin-left: 0px; margin-right: 0px; margin-top: 0.5em; padding-bottom: 0px; padding-left: 2.5em; padding-right: 2.5em; padding-top: 0px;"><li class="first-listitem" style="border-bottom-color: transparent; border-bottom-style: none; border-bottom-width: 1px; border-left-style: none; border-right-style: none; border-top-style: none; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">The concept is simple but requires a few trial runs.</div></li><li class="listitem" style="border-bottom-style: none; border-left-style: none; border-right-style: none; border-top-color: rgb(238, 238, 238); border-top-style: none; border-top-width: 1px; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">A URL with a large number of trailing slashes:</div><ul class="simple-list" style="line-height: 1.4; list-style-type: disc; margin-bottom: 0.5em; margin-left: 0px; margin-right: 0px; margin-top: 0.5em; padding-bottom: 0px; padding-left: 2.5em; padding-right: 2.5em; padding-top: 0px;"><li class="first-listitem" style="border-bottom-style: none; border-left-style: none; border-right-style: none; border-top-style: none; color: #444444; margin-bottom: 0.25em; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0.25em; padding-left: 0px; padding-right: 0px; padding-top: 0.25em; text-indent: 0px;">  <div class="first-para">/cgi-bin /////////////////////////// / could produce directory listing of the original directory.</div></li></ul></li></ul></li></ul></div><table border="0" cellpadding="0" cellspacing="0" class="BlankSpace"><tbody><tr><td height="16"></td></tr></tbody></table><div class="para">The purpose of discussing the various vulnerabilities of the web server here is to highlight how ingenious attackers can be in exploring the functionality of the various components that they are able to elicit an unexpected and previously unknown behavior of a piece of code. No matter how insignificant it is, a security breach can have far reaching implications if left unattended.</div><div class="para">This is not the only issue in focus. The possibility of eliminating flawed coding practices and incorporating proper testing must not be ignored as security measures.</div><div class="para">The Apache Week tracks the vulnerabilities in Apache Server. For instance, consider the vulnerability which was found in the Win32 port of Apache 1.3.20. Because of this, a client submitting a very long URI could cause a directory listing to be returned rather than the default index page. This was subsequently fixed in Apache httpd 1.3.22<br /><br /></div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para"><b>Some of the other vulnerabilities have been:</b></div></td></tr></tbody></table><div class="para"><i class="emphasis">Remote DoS via IPv6</i>: When a client requests that proxy ftp connect to an ftp server with IPv6 address, and the proxy is unable to create an IPv6 socket, an infinite loop occurs causing a remote Denial of Service. This has been fixed in Apache httpd 2.0.47</div><div class="para"><i class="emphasis">Remote DoS with multiple Listen directives</i>: In a server with multiple listening sockets a certain error returned by accept () on a rarely access port can cause a temporary denial of service, due to a bug in the prefork MPM. This has been fixed in Apache httpd 2.0.47</div><div class="para"><i class="emphasis">APR remote crash</i>: A vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors. This has been fixed in Apache httpd 2.0.46</div><div class="para"><i class="emphasis">Basic Authentication DoS</i>: A build system problem in Apache 2.0.40 through 2.0.45 allows remote attackers to cause a denial of access to authenticated content when a threaded server is used. This has been fixed in Apache httpd 2.0.46</div><div class="para"><i class="emphasis">Line feed memory leak DoS</i>: Apache 2.0 versions before Apache 2.0.45 have a significant Denial of Service vulnerability. Remote attackers can cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. This has been fixed in Apache httpd 2.0.45</div><div class="para"><i class="emphasis">MSDOS device names cause DoS</i>: Apache versions before 2.0.44 on Windows do not correctly filter MS-DOS device names which can lead to denial of service attacks and remote code execution. This has been fixed in Apache httpd 2.0.44</div><div class="para"><i class="emphasis">Apache can serve unexpected files</i>: On Windows platforms Apache could be forced to serve unexpected files by appending illegal characters such as '<' to the request URL. This has been fixed in Apache httpd 2.0.44</div><div class="para"><i class="emphasis">Rewrite rules that include references allow access to any file</i>: The Rewrite module, mod_rewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in Rewrite Rule directives: If the destination of a Rewrite Rule contains regular expression references then an attacker will be able to access any file on the server. This has been fixed in Apache httpd 1.3.14</div></span><br /></div></span></div><div style="text-align: justify;"></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">-- </div><div dir="ltr" style="text-align: justify;">Regards,<br />Hardeep Singh<br />(<a href="http://www.fb.com/h4rdeep" target="_blank">www.fb.com/h4rdeep</a>)</div><br /></div>

Apache Vulnerability: Hack Apache based Web Servers Apache Vulnerability The Apache Week tracks the vulnerabilities in Apache Server. Even...

test run 6

Apache Vulnerability: Hack Apache based Web Servers

Popular

Comments

Archive