Red Hat Security AdvisoryRHSA-2010:0175
httpd security, bug fix, and enhancement update
Released 2010-03-25 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-41.ent.7, httpd-2.0.52-41.ent.7.i386, httpd-2.0.52-41.ent.7.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-41.ent.7, httpd-2.0.52-41.ent.7.i386, httpd-devel-2.0.52-41.ent.7 +7
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-41.ent.7, httpd-2.0.52-41.ent.7.i386, httpd-2.0.52-41.ent.7.ia64 +12
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-41.ent.7, httpd-2.0.52-41.ent.7.i386, httpd-2.0.52-41.ent.7.ia64 +12
Fixes 1 record
Priority LOW 38
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a pare…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.18443 · Published 2010-03-05 · Fixed CWE-200
