Red Hat Security AdvisoryRHSA-2007:0208
w3c-libwww security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 w3c-libwww-5.4.0-10.1.RHEL4.2, w3c-libwww-5.4.0-10.1.RHEL4.2.i386, w3c-libwww-5.4.0-10.1.RHEL4.2.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 w3c-libwww-5.4.0-10.1.RHEL4.2, w3c-libwww-5.4.0-10.1.RHEL4.2.i386, w3c-libwww-apps-5.4.0-10.1.RHEL4.2 +3
- Red Hat Enterprise Linux ES version 4 w3c-libwww-5.4.0-10.1.RHEL4.2, w3c-libwww-5.4.0-10.1.RHEL4.2.i386, w3c-libwww-5.4.0-10.1.RHEL4.2.ia64 +6
- Red Hat Enterprise Linux WS version 4 w3c-libwww-5.4.0-10.1.RHEL4.2, w3c-libwww-5.4.0-10.1.RHEL4.2.i386, w3c-libwww-5.4.0-10.1.RHEL4.2.ia64 +6
Fixes 1 record
Priority LOW 24
The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-b…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02099 · Published 2005-10-12 · Fixed CWE-20
