Red Hat Security AdvisoryRHSA-2007:0911
httpd security update
Released 2007-10-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) httpd-2.0.59-1.el4s1.8, httpd-2.0.59-1.el4s1.8.i386, httpd-devel-2.0.59-1.el4s1.8 +5
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) httpd-2.0.59-1.el4s1.8, httpd-2.0.59-1.el4s1.8.i386, httpd-devel-2.0.59-1.el4s1.8 +5
Fixes 2 records
Priority MEDIUM 49
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HT…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.26188 · Published 2007-09-14 · Fixed CWE-79
Priority LOW 37
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted dat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12901 · Published 2007-08-23 · Fixed CWE-125
