Red Hat Security AdvisoryRHSA-2010:0396
httpd and httpd22 security and enhancement update
Released 2010-05-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server httpd-2.2.14-1.2.6.jdk6.ep5.el5, httpd-2.2.14-1.2.6.jdk6.ep5.el5.i386, httpd-devel-2.2.14-1.2.6.jdk6.ep5.el5 +5
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS httpd22-2.2.14-11.jdk6.ep5.el4, httpd22-2.2.14-11.jdk6.ep5.el4.i386, httpd22-apr-2.2.14-11.jdk6.ep5.el4 +13
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES httpd22-2.2.14-11.jdk6.ep5.el4, httpd22-2.2.14-11.jdk6.ep5.el4.i386, httpd22-apr-2.2.14-11.jdk6.ep5.el4 +13
Fixes 2 records
Priority MEDIUM 42
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.20889 · Published 2010-03-05 · Fixed
Priority LOW 38
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a pare…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.18443 · Published 2010-03-05 · Fixed CWE-200
