Red Hat Security AdvisoryRHSA-2010:0011
httpd and httpd22 security update
Released 2010-01-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server httpd-2.2.10-11.ep5.el5, httpd-2.2.10-11.ep5.el5.i386, httpd-devel-2.2.10-11.ep5.el5 +5
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS httpd22-2.2.10-25.1.ep5.el4, httpd22-2.2.10-25.1.ep5.el4.i386, httpd22-apr-2.2.10-25.1.ep5.el4 +11
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES httpd22-2.2.10-25.1.ep5.el4, httpd22-2.2.10-25.1.ep5.el4.i386, httpd22-apr-2.2.10-25.1.ep5.el4 +11
Fixes 3 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority LOW 38
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13547 · Published 2009-09-08 · Fixed
Priority LOW 24
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.08566 · Published 2009-09-08 · Fixed CWE-476
THREATIST.IORead the docs