IntelDataset:apache2 - Historique des versions

HackBBS le 10 septembre 2024 à 17:24

2024-09-10T17:24:04Z

← Version précédente		Version du 10 septembre 2024 à 17:24
Ligne 72 :		Ligne 72 :
	./server/util_expr_parse.c:761: [4] (format) fprintf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification.<br />		./server/util_expr_parse.c:761: [4] (format) fprintf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification.<br />
	./server/util_regex.c:177: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />		./server/util_regex.c:177: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />
	./srclib/apr/build/aplibtool.c:172: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />
	./srclib/apr/build/aplibtool.c:174: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />		./srclib/apr/build/aplibtool.c:174: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />
	./srclib/apr/build/aplibtool.c:276: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />		./srclib/apr/build/aplibtool.c:276: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).<br />

HackBBS le 10 septembre 2024 à 17:07

2024-09-10T17:07:14Z

← Version précédente		Version du 10 septembre 2024 à 17:07
Ligne 2 :		Ligne 2 :
	./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	~~./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />~~
	./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />		./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />
	./test/test_find.c:71: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />		./test/test_find.c:71: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />

HackBBS le 10 septembre 2024 à 16:56

2024-09-10T16:56:56Z

← Version précédente		Version du 10 septembre 2024 à 16:56
Ligne 3 :		Ligne 3 :
	./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />		./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />
	./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).<br />
	./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />		./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />
	./test/test_find.c:71: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />		./test/test_find.c:71: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />

HackBBS le 10 septembre 2024 à 16:55

2024-09-10T16:55:46Z

← Version précédente		Version du 10 septembre 2024 à 16:55
Ligne 3 :		Ligne 3 :
	./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />		./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />
	~~./srclib/apr/file_io/unix/filestat.c:179: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.<br />~~
	./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).<br />		./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).<br />
	./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />		./test/test_find.c:67: [5] (buffer) gets: Does not check for buffer overflows (CWE-120, CWE-20). Use fgets() instead.<br />

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

2024-09-10T16:54:01Z

Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

Voir les modifications

HackBBS : Contenu remplacé par « toto3 »

2024-09-10T16:51:31Z

Contenu remplacé par « toto3 »

Voir les modifications

Korigan le 9 mai 2024 à 23:03

2024-05-09T23:03:18Z

← Version précédente		Version du 9 mai 2024 à 23:03
Ligne 1 :		Ligne 1 :
	~~./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />~~
	./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />

Korigan le 9 mai 2024 à 22:41

2024-05-09T22:41:57Z

← Version précédente		Version du 9 mai 2024 à 22:41
Ligne 1 :		Ligne 1 :
			./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />

Korigan le 9 mai 2024 à 22:41

2024-05-09T22:41:00Z

← Version précédente		Version du 9 mai 2024 à 22:41
Ligne 1 :		Ligne 1 :
	~~./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />~~
	./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />

Korigan le 8 mai 2024 à 09:16

2024-05-08T09:16:23Z

← Version précédente		Version du 8 mai 2024 à 09:16
Ligne 1 :		Ligne 1 :
			./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
			./modules/generators/mod_cgid.c:659: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./modules/md/mod_md_os.c:43: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />
	./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />		./os/unix/unixd.c:265: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.<br />

IntelDataset:apache2 - Historique des versions

HackBBS le 10 septembre 2024 à 17:24

HackBBS le 10 septembre 2024 à 17:07

HackBBS le 10 septembre 2024 à 16:56

HackBBS le 10 septembre 2024 à 16:55

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

HackBBS : Contenu remplacé par « toto3 »

Korigan le 9 mai 2024 à 23:03

Korigan le 9 mai 2024 à 22:41

Korigan le 9 mai 2024 à 22:41

Korigan le 8 mai 2024 à 09:16

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

HackBBS : Contenu remplacé par « toto3 »