[ask] Mod_ssl

Forum untuk membahas semua tentang web hacking mulai dari footprint, scanning, gain access, escalate previlege, exploit,cover track, backdoors sampai mengamankan web

Moderators: Paman, Xshadow, indounderground, NeOS-01

Forum rules
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
Post Reply
User avatar
exops
Posts: 106
Joined: Sat Mar 07, 2009 1:03 pm
Location: Djogja
Contact:

[ask] Mod_ssl

Post by exops » Sat Jun 27, 2009 9:37 am

Code: Select all

Vulnerability description
This alert was generated using only banner information. It may be a false positive. 

A format string vulnerability has been found in mod_ssl versions older than 2.8.19. Successful exploitation of this issue will most likely allow an attacker to execute arbitrary code on the affected computer.

Affected mod_ssl versions (up to 2.8.18).

Affected items
mod_ssl 
The impact of this vulnerability
Denial of service and/or possible arbitrary code execution.

How to fix this vulnerability
Upgrade mod_ssl to the latest version.

Web references
BID 10736 
mod_ssl Homepage 
maksudnya apa ya ? :roll:
Semakin banyak memberi, semakin banyak menerima
Image
http://exops.info

User avatar
3xtr3m3b0y
Posts: 317
Joined: Wed Apr 22, 2009 5:11 pm
Location: ~[Hacked Machine]~
Contact:

Re: [ask] Mod_ssl

Post by 3xtr3m3b0y » Mon Jul 27, 2009 8:15 pm

SSL = Secure Socket Layer
mod_ssl biasanya digunakan bersama dgn Apache utk mengaktifkan HTTP Secure atau HTTPS, sehingga setiap ada transaksi data via HTTP datanya akan di acak (Enkripsi)
...n0 l1m17...

Post Reply

Return to “Web Hacking”