buenas soy un nw que comienza en el mundo hacker y escanee con el sss una pagina y me amndo que tenia las siguientes vulnerabilidades:
Port 80
Description A buffer overflow vulnerability exists in the htdigest utility included with Apache. The vulnerability is due to improper bounds checking when copying user-supplied realm data into local buffers.By supplying an overly long realm value to the command line options of htdigest, it is possible to trigger an overflow condition. This may cause memory to be corrupted with attacker-specified values.This issue could be exploited by a remote attacker; potentially resulting in the execution of arbitrary system commands within the context of the web server process.
How to fix Upgrade to the current version of Apache.
Risk level High
Related Links Apache Web Server Homepage
CVE GENERIC-MAP-NOMATCH
Bugtraq ID
12877
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Port 80
Description The problem presents itself when the affected module attempts to parse mod_include specific tag values. A failure to properly validate the lengths of user-supplied tag strings prior to copying them into finite buffers facilitates the overflow. A local attacker may leverage this issue to execute arbitrary code on the affected computer with the privileges of the affected Apache server.
How to fix Upgrading to the most recent version of Apache.
Risk level High
Related Links Apache Web Server Homepage
CVE CAN-2004-0940
Bugtraq ID 11471
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Bugtraq ID: 5284
Class: Design Error
CVE:
Remote: Yes
Local: No
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
80
Description Apache has reported that some versions of mod_python may be prone to denial of service attacks when handling malformed queries. The details regarding this vulnerability are currently unknown, however the vendor has stated that a remote user may be capable of crashing a vulnerable Apache server.
How to fix Upgrade to the current version of mod_python.
Risk level High
Related Links Apache mod_python Module HomePage
CVE CAN-2003-0973
Bugtraq ID 9129
y muchas mas pero esan son las primeras por favor alguien me puede ayudar a explotar estas vulnerabilidades ya que yo no puedo
apenas comienzo y de paso algun manual acerca de esto que me permita mejorar mi habilidades
por favor pro su respuesta les estare agradecido
Autor