Red Hat Security AdvisoryRHSA-2013:1134
httpd security update
Released 2013-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 2.0
Fixes 2 records
Priority MEDIUM 44
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary command…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.24886 · Published 2013-06-10 · Partial fix
Priority MEDIUM 43
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.29484 · Published 2013-07-10 · Partial fix
