Red Hat Security Advisory

RHSA-2006:0159

httpd security update

Released 2006-01-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 httpd-2.0.46-56.ent, httpd-2.0.46-56.ent.i386, httpd-devel-2.0.46-56.ent +3
Red Hat Enterprise Linux AS version 3 httpd-2.0.46-56.ent, httpd-2.0.46-56.ent.i386, httpd-2.0.46-56.ent.ia64 +9
Red Hat Enterprise Linux AS version 4 httpd-2.0.52-22.ent, httpd-2.0.52-22.ent.i386, httpd-2.0.52-22.ent.ia64 +17
Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-22.ent, httpd-2.0.52-22.ent.i386, httpd-devel-2.0.52-22.ent +7
Red Hat Enterprise Linux ES version 3 httpd-2.0.46-56.ent, httpd-2.0.46-56.ent.i386, httpd-2.0.46-56.ent.ia64 +6
Red Hat Enterprise Linux ES version 4 httpd-2.0.52-22.ent, httpd-2.0.52-22.ent.i386, httpd-2.0.52-22.ent.ia64 +12
Red Hat Enterprise Linux WS version 3 httpd-2.0.46-56.ent, httpd-2.0.46-56.ent.i386, httpd-2.0.46-56.ent.ia64 +6
Red Hat Enterprise Linux WS version 4 httpd-2.0.52-22.ent, httpd-2.0.52-22.ent.i386, httpd-2.0.52-22.ent.ia64 +12

Fixes 3 records

TI-2005-03177 CVE-2005-3352 · GHSA-3h5q-3j8q-4rm9

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before…

MEDIUM 58

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer wh…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.73692 Published 2005-12-13 Fixed CWE-79

TI-2005-03182 CVE-2005-3357 · GHSA-6c36-v393-c32c

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control…

MEDIUM 45

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.24286 Published 2006-01-06 Fixed CWE-399

TI-2005-02802 CVE-2005-2970 · GHSA-q8m3-9hrv-x6fg

Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows…

LOW 38

Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.1419 Published 2005-10-25 Fixed CWE-770