Red Hat Security AdvisoryRHSA-2010:0659
httpd security and bug fix update
Released 2010-08-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-43.el5_5.3, httpd-2.2.3-43.el5_5.3.i386, httpd-2.2.3-43.el5_5.3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-43.el5_5.3, httpd-2.2.3-43.el5_5.3.i386, mod_ssl-1:2.2.3-43.el5_5.3 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-43.el5_5.3, httpd-devel-2.2.3-43.el5_5.3, httpd-devel-2.2.3-43.el5_5.3.i386 +2
Fixes 2 records
Priority MEDIUM 42
The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.21425 · Published 2010-07-28 · Partial fix
Priority LOW 34
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtai…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.08284 · Published 2010-08-05 · Fixed CWE-200
