Red Hat Security AdvisoryRHSA-2008:0967
httpd security and bug fix update
Released 2008-11-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 httpd-2.0.46-71.ent, httpd-2.0.46-71.ent.i386, httpd-devel-2.0.46-71.ent +3
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-11.el5_2.4, httpd-2.2.3-11.el5_2.4.i386, httpd-2.2.3-11.el5_2.4.ia64 +13
- Red Hat Enterprise Linux AS version 3 httpd-2.0.46-71.ent, httpd-2.0.46-71.ent.i386, httpd-2.0.46-71.ent.ia64 +9
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-41.ent.2, httpd-2.0.52-41.ent.2.i386, httpd-2.0.52-41.ent.2.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-11.el5_2.4, httpd-2.2.3-11.el5_2.4.i386, mod_ssl-1:2.2.3-11.el5_2.4 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-11.el5_2.4, httpd-devel-2.2.3-11.el5_2.4, httpd-devel-2.2.3-11.el5_2.4.i386 +2
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-41.ent.2, httpd-2.0.52-41.ent.2.i386, httpd-devel-2.0.52-41.ent.2 +7
- Red Hat Enterprise Linux ES version 3 httpd-2.0.46-71.ent, httpd-2.0.46-71.ent.i386, httpd-2.0.46-71.ent.ia64 +6
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-41.ent.2, httpd-2.0.52-41.ent.2.i386, httpd-2.0.52-41.ent.2.ia64 +12
- Red Hat Enterprise Linux WS version 3 httpd-2.0.46-71.ent, httpd-2.0.46-71.ent.i386, httpd-2.0.46-71.ent.ia64 +6
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-41.ent.2, httpd-2.0.52-41.ent.2.i386, httpd-2.0.52-41.ent.2.ia64 +12
Fixes 2 records
Priority MEDIUM 47
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote at…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.38953 · Published 2008-08-06 · Partial fix CWE-79
Priority LOW 37
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP server…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12714 · Published 2008-06-13 · Partial fix CWE-770
