Lucene search

K
fedoraFedoraFEDORA:3E0EE110BA1
HistoryMay 12, 2010 - 5:58 p.m.

[SECURITY] Fedora 13 Update: boa-0.94.14-0.15.rc21.fc13

2010-05-1217:58:02
lists.fedoraproject.org
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Boa is a single-tasking HTTP server. That means that unlike traditional web servers, it does not fork for each incoming connection, nor does it fork ma ny copies of itself to handle multiple connections. It internally multiplexes all of the ongoing HTTP connections, and forks only for CGI programs (which must be separate processes), automatic directory generation, and automatic file gunzipping. The primary design goals of Boa are speed and security. Security, in the se nse of “can’t be subverted by a malicious user,” not “fine grained access contr ol and encrypted communications”. Boa is not intended as a feature-packed serv er. Available rpmbuild rebuild options : --with : debug access poll --without : gunzip sendfile

OSVersionArchitecturePackageVersionFilename
Fedora13anyboa< 0.94.14UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N