Red Hat Security AdvisoryRHSA-2013:1133
httpd security update
Released 2013-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server httpd-2.2.22-25.ep6.el5, httpd-2.2.22-25.ep6.el5.i386, httpd-devel-2.2.22-25.ep6.el5 +7
- Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server httpd-2.2.22-25.ep6.el6, httpd-2.2.22-25.ep6.el6.i386, httpd-devel-2.2.22-25.ep6.el6 +7
Fixes 2 records
Priority MEDIUM 44
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary command…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.24886 · Published 2013-06-10 · Partial fix
Priority MEDIUM 43
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.29484 · Published 2013-07-10 · Partial fix
