celah keamanan pada http://mydjournal.org

1. Apache Mod_SSL SSL_Util_UUEncode_Binary Staack Buffer Overflow Vuln

Vulnerability description :
This alert was generated using only banner information. It may be a false positive.

A stack-based buffer overflow has been reported in the Apache mod_ssl module. This issue would most likely result in a denial of service if triggered, but could theoretically allow for execution of arbitrary code. The issue is not believed to be exploitable to execute arbitrary code on x86 architectures, though this may not be the case with other architectures.

Affected mod_ssl versions (up to 2.8.17).

This vulnerability affects mod_ssl.

The impact of this vulnerability :
Denial of service and/or possible arbitrary code execution

Attack details :
Current version is mod_ssl/2.2.10 OpenSSL/0.9.8b mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Unknown

Web references :
http://www.securityfocus.com/bid/10355/
http://www.modssl.org/


2. Proxy accepts CONNECT requests

Vulnerability description :
The remote proxy server can be used to send CONNECT requests.
The proxy allows everyone to perform CONNECT HTTP requests to arbitrary ports.
This may allow attackers to bypass your firewall and connect to sensitive ports like 23 (telnet), 25 (sendmail) using the proxy. A spammer may be using your proxy to send bulk email.

Web references :
http://www.suretecsystems.com/our_docs/proxy-guide-en/index.html
http://en.wikipedia.org/wiki/Web_proxy
http://en.wikipedia.org/wiki/Open_proxy


3. Proxy can be used to connect to arbitrary

Vulnerability description :
The remote proxy server can be used to connect to arbitrary ports.
The proxy allows everyone to perform HTTP requests to arbitrary ports.
This may allow attackers to bypass your firewall and connect to sensitive ports like 23 (telnet), 25 (sendmail) using the proxy.
This vulnerability affects Server.

Attack details :
The proxy server is running on TCP port 8080

Web references :
http://www.suretecsystems.com/our_docs/proxy-guide-en/index.html
http://en.wikipedia.org/wiki/Web_proxy
http://en.wikipedia.org/wiki/Open_proxy

nb:
sorry bahasa inggrisnya belepotan.. wkwkwkwkwkwkwkwkwk.. met mentraslate ria...