• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Apache Chunked-Encoding Memory Corruption Vulnerability

References:

• AIX Toolbox download page - Alphabetical Listing (IBM)
  
• Apache chunked encoding exploit (CORE Security)
  
• Apache Software Foundation Homepage (Apache Software Foundation)
  
• Heap Overflow in IIS HTR Chunked Encoding (Internet Security Systems)
  
• MPSB02-07 - Patch available to support Apache 2.0.39 with JRun 4.0/ColdFusion MX (Macromedia)
  
• NetScreen Response to Apache Security Hole CAN-2002-0392 (NetScreen)
  
• OpenBSD 3.0 release errata & patch list (OpenBSD)
  
• OpenBSD 3.2 release errata & patch list (OpenBSD)
  
• Oracle Security Alert #36 (Oracle)
  
• OracleDB Apache ChunkedEncoding overflow exploit (CORE Security)
  
• Security Updates (Apple)
  
• security_bulletin_20020617.txt (Apache Group)
  
• Sun Alert ID: 45961 (Sun)
  
• Up2Date 3.201 (Astaro Security Linux)