Red Hat Security AdvisoryRHSA-2009:1580
httpd security update
Released 2009-11-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-41.ent.6, httpd-2.0.52-41.ent.6.i386, httpd-2.0.52-41.ent.6.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-41.ent.6, httpd-2.0.52-41.ent.6.i386, httpd-devel-2.0.52-41.ent.6 +7
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-41.ent.6, httpd-2.0.52-41.ent.6.i386, httpd-2.0.52-41.ent.6.ia64 +12
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-41.ent.6, httpd-2.0.52-41.ent.6.i386, httpd-2.0.52-41.ent.6.ia64 +12
Fixes 4 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority MEDIUM 48
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU co…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.17111 · Published 2009-07-10 · Fixed CWE-400
Priority LOW 38
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13547 · Published 2009-09-08 · Fixed
Priority LOW 24
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.08566 · Published 2009-09-08 · Fixed CWE-476
THREATIST.IORead the docs