Red Hat Security Advisory

RHSA-2007:0556

httpd security update

Released 2007-06-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-7.el5, httpd-2.2.3-7.el5.i386, httpd-2.2.3-7.el5.ia64 +13
Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-7.el5, httpd-2.2.3-7.el5.i386, mod_ssl-1:2.2.3-7.el5 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-7.el5, httpd-devel-2.2.3-7.el5, httpd-devel-2.2.3-7.el5.i386 +2

Fixes 3 records

TI-2006-05537 CVE-2006-5752 · GHSA-jp93-qpwr-857r

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in…

MEDIUM 43

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.27783 Published 2007-06-27 Fixed

TI-2007-01786 CVE-2007-1863 · GHSA-hcvj-926w-fhhh

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is…

LOW 36

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing han…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11786 Published 2007-06-27 Fixed

TI-2007-03199 CVE-2007-3304 · GHSA-f63r-c37x-f6mg

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to…

LOW 28

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is se…

CVSS 2.0MEDIUM 4.7 Local No auth Interaction — EPSS 0.03298 Published 2007-06-20 Fixed