Red Hat Security Advisory

RHSA-2009:1579

httpd security update

Released 2009-11-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 httpd-2.0.46-77.ent, httpd-2.0.46-77.ent.i386, httpd-devel-2.0.46-77.ent +3
Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-31.el5_4.2, httpd-2.2.3-31.el5_4.2.i386, httpd-2.2.3-31.el5_4.2.ia64 +13
Red Hat Enterprise Linux AS version 3 httpd-2.0.46-77.ent, httpd-2.0.46-77.ent.i386, httpd-2.0.46-77.ent.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-31.el5_4.2, httpd-2.2.3-31.el5_4.2.i386, mod_ssl-1:2.2.3-31.el5_4.2 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-31.el5_4.2, httpd-devel-2.2.3-31.el5_4.2, httpd-devel-2.2.3-31.el5_4.2.i386 +2
Red Hat Enterprise Linux ES version 3 httpd-2.0.46-77.ent, httpd-2.0.46-77.ent.i386, httpd-2.0.46-77.ent.ia64 +6
Red Hat Enterprise Linux WS version 3 httpd-2.0.46-77.ent, httpd-2.0.46-77.ent.i386, httpd-2.0.46-77.ent.ia64 +6

Fixes 3 records

TI-2009-03392 CVE-2009-3555 · GHSA-f7w7-6pjc-wwm6

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft…

CRITICAL 91

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87264 Published 2009-11-09 Fixed in 7.0.10, 6.0.32 +1 CWE-300

TI-2009-02950 CVE-2009-3095 · GHSA-w532-9px6-hv54

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass…

LOW 38

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.13547 Published 2009-09-08 Fixed

TI-2009-02949 CVE-2009-3094 · GHSA-vg4c-4xc2-v43h

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp…

LOW 24

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.08566 Published 2009-09-08 Fixed CWE-476