Comments on: Acunetix http://ja.meswilson.com/blog/2007/03/28/acunetix/ Fri, 26 Feb 2010 11:47:42 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Eric http://ja.meswilson.com/blog/2007/03/28/acunetix/comment-page-1/#comment-1825 Eric Wed, 07 Nov 2007 19:35:27 +0000 http://ja.meswilson.com/blog/2007/03/28/acunetix/#comment-1825 found a scanner called "Maui Security Scanner" (www.elanize.com), i tried both of them and it seems like maui got a bigger feature set, you should have a look at it. found a scanner called "Maui Security Scanner" (www.elanize.com), i tried both of them and it seems like maui got a bigger feature set, you should have a look at it.

]]> By: James Wilson http://ja.meswilson.com/blog/2007/03/28/acunetix/comment-page-1/#comment-12 James Wilson Thu, 29 Mar 2007 23:07:07 +0000 http://ja.meswilson.com/blog/2007/03/28/acunetix/#comment-12 Cool. Thanks for the comments. Cool. Thanks for the comments.

]]> By: Oswald http://ja.meswilson.com/blog/2007/03/28/acunetix/comment-page-1/#comment-11 Oswald Thu, 29 Mar 2007 16:50:40 +0000 http://ja.meswilson.com/blog/2007/03/28/acunetix/#comment-11 Thanks!!! Okay, in this case that's another false positive. ;) Acunetix thinks you're using Apache 1.3 (with mod_ssl from www.modssl.org), but XAMPP uses Apache 2.x (with bundled mod_ssl from apache.org). These two mod_ssl's have the same name, but are different packages. Thanks!!! Okay, in this case that's another false positive. ;)

Acunetix thinks you're using Apache 1.3 (with mod_ssl from http://www.modssl.org), but XAMPP uses Apache 2.x (with bundled mod_ssl from apache.org). These two mod_ssl's have the same name, but are different packages.

]]> By: James Wilson http://ja.meswilson.com/blog/2007/03/28/acunetix/comment-page-1/#comment-10 James Wilson Thu, 29 Mar 2007 15:24:56 +0000 http://ja.meswilson.com/blog/2007/03/28/acunetix/#comment-10 According to xampp-changes.txt, 1.6.0a. Apache Mod_SSL SSL_Util_UUEncode_Binary Stack Buffer Overflow Vulnerability <blockquote>Vulnerability description This alert has been generated using only banner information. It may be a false positive. A stack-based buffer overflow has been reported in the Apache mod_ssl module. This issue would most likely result in a denial of service if triggered, but could theoretically allow for execution of arbitrary code. The issue is not believed to be exploitable to execute arbitrary code on x86 architectures, though this may not be the case with other architectures. Affected mod_ssl versions (up to 2.8.17). This vulnerability affects mod_ssl. The impact of this vulnerability Denial of service and/or possible arbitrary code execution. Attack details Current version is mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1 PHP/5.2.1 </blockquote> Apache Mod_SSL Log Function Format String Vulnerability <blockquote>Vulnerability description This alert has been generated using only banner information. It may be a false positive. A format string vulnerability has been found in mod_ssl versions older than 2.8.19. Successful exploitation of this issue will most likely allow an attacker to execute arbitrary code on the affected computer. Affected mod_ssl versions (up to 2.8.18). This vulnerability affects mod_ssl. The impact of this vulnerability Denial of service and/or possible arbitrary code execution. Attack details Current version is mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1 PHP/5.2.1 </blockquote> According to xampp-changes.txt, 1.6.0a.

Apache Mod_SSL SSL_Util_UUEncode_Binary Stack Buffer Overflow Vulnerability

Vulnerability description
This alert has been generated using only banner information. It may be a false positive.

A stack-based buffer overflow has been reported in the Apache mod_ssl module. This issue would most likely result in a denial of service if triggered, but could theoretically allow for execution of arbitrary code. The issue is not believed to be exploitable to execute arbitrary code on x86 architectures, though this may not be the case with other architectures.

Affected mod_ssl versions (up to 2.8.17).

This vulnerability affects mod_ssl.
The impact of this vulnerability
Denial of service and/or possible arbitrary code execution.

Attack details
Current version is mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1 PHP/5.2.1

Apache Mod_SSL Log Function Format String Vulnerability

Vulnerability description
This alert has been generated using only banner information. It may be a false positive.

A format string vulnerability has been found in mod_ssl versions older than 2.8.19. Successful exploitation of this issue will most likely allow an attacker to execute arbitrary code on the affected computer.

Affected mod_ssl versions (up to 2.8.18).

This vulnerability affects mod_ssl.
The impact of this vulnerability
Denial of service and/or possible arbitrary code execution.

Attack details
Current version is mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1 PHP/5.2.1

]]> By: Oswald http://ja.meswilson.com/blog/2007/03/28/acunetix/comment-page-1/#comment-9 Oswald Thu, 29 Mar 2007 07:19:05 +0000 http://ja.meswilson.com/blog/2007/03/28/acunetix/#comment-9 Do you remember what Acunetix exactly complained about mod_ssl? And which version of XAMPP are you using? Do you remember what Acunetix exactly complained about mod_ssl? And which version of XAMPP are you using?

]]>