apache22 -- several vulnerabilities

2012-09-1300:00:00

vuxml.freebsd.org

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.7%

JSON

Apache HTTP SERVER PROJECT reports:

low: XSS in mod_negotiation when untrusted uploads are supported CVE-2012-2687
Possible XSS for sites which use mod_negotiation and
allow untrusted uploads to locations which have MultiViews enabled.
low: insecure LD_LIBRARY_PATH handling CVE-2012-0883
This issue was already fixed in port version 2.2.22_5

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache22< 2.2.23UNKNOWN
FreeBSDanynoarchapache22-event-mpm< 2.2.23UNKNOWN
FreeBSDanynoarchapache22-itk-mpm< 2.2.23UNKNOWN
FreeBSDanynoarchapache22-peruser-mpm< 2.2.23UNKNOWN
FreeBSDanynoarchapache22-worker-mpm< 2.2.23UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache22	< 2.2.23	UNKNOWN
FreeBSD	any	noarch	apache22-event-mpm	< 2.2.23	UNKNOWN
FreeBSD	any	noarch	apache22-itk-mpm	< 2.2.23	UNKNOWN
FreeBSD	any	noarch	apache22-peruser-mpm	< 2.2.23	UNKNOWN
FreeBSD	any	noarch	apache22-worker-mpm	< 2.2.23	UNKNOWN