Red Hat Security AdvisoryRHSA-2008:0966
Red Hat Application Stack v2.2 security and enhancement update
Released 2008-12-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Application Stack v2 for Enterprise Linux (v.5) httpd-2.2.10-1.el5s2, httpd-2.2.10-1.el5s2.i386, httpd-devel-2.2.10-1.el5s2 +47
Fixes 3 records
Priority MEDIUM 47
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote at…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.38953 · Published 2008-08-06 · Partial fix CWE-79
Priority LOW 37
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP server…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12714 · Published 2008-06-13 · Partial fix CWE-770
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09114 · Published 2008-01-12 · Fixed CWE-352