Red Hat Security AdvisoryRHSA-2010:0168
httpd security and enhancement update
Released 2010-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-31.el5_4.4, httpd-2.2.3-31.el5_4.4.i386, httpd-2.2.3-31.el5_4.4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-31.el5_4.4, httpd-2.2.3-31.el5_4.4.i386, mod_ssl-1:2.2.3-31.el5_4.4 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-31.el5_4.4, httpd-devel-2.2.3-31.el5_4.4, httpd-devel-2.2.3-31.el5_4.4.i386 +2
Fixes 2 records
Priority MEDIUM 42
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.20889 · Published 2010-03-05 · Fixed
Priority LOW 38
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a pare…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.18443 · Published 2010-03-05 · Fixed CWE-200
