Red Hat Security AdvisoryRHSA-2009:1058
httpd security update
Released 2009-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server httpd-2.2.10-4.ep5.el5, httpd-2.2.10-4.ep5.el5.i386, httpd-devel-2.2.10-4.ep5.el5 +5
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS httpd22-2.2.10-16.1.ep5.el4, httpd22-2.2.10-16.1.ep5.el4.i386, httpd22-apr-2.2.10-16.1.ep5.el4 +11
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES httpd22-2.2.10-16.1.ep5.el4, httpd22-2.2.10-16.1.ep5.el4.i386, httpd22-apr-2.2.10-16.1.ep5.el4 +11
Fixes 1 record
Priority LOW 37
mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12383 · Published 2009-04-23 · Fixed
