Red Hat Security AdvisoryRHSA-2006:0619
httpd security update
Released 2006-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 httpd-2.0.46-61.ent, httpd-2.0.46-61.ent.i386, httpd-devel-2.0.46-61.ent +3
- Red Hat Enterprise Linux AS version 3 httpd-2.0.46-61.ent, httpd-2.0.46-61.ent.i386, httpd-2.0.46-61.ent.ia64 +9
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-28.ent, httpd-2.0.52-28.ent.i386, httpd-2.0.52-28.ent.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-28.ent, httpd-2.0.52-28.ent.i386, httpd-devel-2.0.52-28.ent +7
- Red Hat Enterprise Linux ES version 3 httpd-2.0.46-61.ent, httpd-2.0.46-61.ent.i386, httpd-2.0.46-61.ent.ia64 +6
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-28.ent, httpd-2.0.52-28.ent.i386, httpd-2.0.52-28.ent.ia64 +12
- Red Hat Enterprise Linux WS version 3 httpd-2.0.46-61.ent, httpd-2.0.46-61.ent.i386, httpd-2.0.46-61.ent.ia64 +6
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-28.ent, httpd-2.0.52-28.ent.i386, httpd-2.0.52-28.ent.ia64 +12
Fixes 1 record
Priority MEDIUM 64
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP r…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.95145 · Published 2006-07-28 · Fixed CWE-79
