Red Hat Security AdvisoryRHSA-2009:1075
httpd security update
Released 2009-05-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-22.el5_3.1, httpd-2.2.3-22.el5_3.1.i386, httpd-2.2.3-22.el5_3.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-22.el5_3.1, httpd-2.2.3-22.el5_3.1.i386, mod_ssl-1:2.2.3-22.el5_3.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-22.el5_3.1, httpd-devel-2.2.3-22.el5_3.1, httpd-devel-2.2.3-22.el5_3.1.i386 +2
Fixes 2 records
Priority LOW 31
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstra…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05479 · Published 2008-07-10 · Fixed CWE-399
Priority LOW 26
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2)…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.01955 · Published 2009-05-28 · Fixed CWE-16
