Red Hat Security AdvisoryRHSA-2012:0128
httpd security update
Released 2012-02-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-15.el6_2.1, httpd-tools-2.2.15-15.el6_2.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-2.2.15-15.el6_2.1, httpd-devel-2.2.15-15.el6_2.1, httpd-manual-2.2.15-15.el6_2.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-15.el6_2.1, httpd-tools-2.2.15-15.el6_2.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-2.2.15-15.el6_2.1, httpd-devel-2.2.15-15.el6_2.1, httpd-manual-2.2.15-15.el6_2.1 +1
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-15.el6_2.1, httpd-devel-2.2.15-15.el6_2.1, httpd-devel-2.2.15-15.el6_2.1.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-15.el6_2.1, httpd-devel-2.2.15-15.el6_2.1, httpd-manual-2.2.15-15.el6_2.1 +2
Fixes 5 records
Priority MEDIUM 61
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.82198 · Published 2012-01-28 · Partial fix
Priority MEDIUM 54
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.59628 · Published 2011-11-30 · Fixed CWE-20
Priority MEDIUM 51
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch patt…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.49697 · Published 2011-11-30 · Partial fix CWE-20
Priority LOW 28
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.04902 · Published 2011-11-08 · Partial fix CWE-189
Priority LOW 26
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field wi…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.02799 · Published 2012-01-18 · Partial fix
THREATIST.IORead the docs