Red Hat Security AdvisoryRHSA-2011:1392
httpd security and bug fix update
Released 2011-10-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) httpd-2.2.3-53.el5_7.3, httpd-devel-2.2.3-53.el5_7.3, httpd-devel-2.2.3-53.el5_7.3.i386 +2
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-53.el5_7.3, httpd-2.2.3-53.el5_7.3.i386, httpd-2.2.3-53.el5_7.3.ia64 +13
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-49.ent, httpd-2.0.52-49.ent.i386, httpd-2.0.52-49.ent.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-53.el5_7.3, httpd-2.2.3-53.el5_7.3.i386, mod_ssl-1:2.2.3-53.el5_7.3 +1
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-49.ent, httpd-2.0.52-49.ent.i386, httpd-devel-2.0.52-49.ent +7
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-49.ent, httpd-2.0.52-49.ent.i386, httpd-2.0.52-49.ent.ia64 +12
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-49.ent, httpd-2.0.52-49.ent.i386, httpd-2.0.52-49.ent.ia64 +12
Fixes 1 record
Priority HIGH 66
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for config…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.90734 · Published 2011-10-05 · Partial fix CWE-20
