5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.956 High
EPSS
Percentile
99.2%
The Apache HTTP Server is a popular Web server.
A flaw was found in the Apache HTTP Server mod_status module. On sites
where the server-status page is publicly accessible and ExtendedStatus is
enabled this could lead to a cross-site scripting attack. On Red Hat
Enterprise Linux the server-status page is not enabled by default and it is
best practice to not make this publicly available. (CVE-2006-5752)
A bug was found in the Apache HTTP Server mod_cache module. On sites where
caching is enabled, a remote attacker could send a carefully crafted
request that would cause the Apache child process handling that request to
crash. This could lead to a denial of service if using a threaded
Multi-Processing Module. (CVE-2007-1863)
Users of httpd should upgrade to these updated packages, which contain
backported patches to correct these issues. Users should restart Apache
after installing this update.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | ppc | httpd-suexec | < 2.0.52-32.2.ent | httpd-suexec-2.0.52-32.2.ent.ppc.rpm |
RedHat | any | ia64 | httpd-devel | < 2.0.52-32.2.ent | httpd-devel-2.0.52-32.2.ent.ia64.rpm |
RedHat | any | s390 | httpd-devel | < 2.0.52-32.2.ent | httpd-devel-2.0.52-32.2.ent.s390.rpm |
RedHat | any | s390x | mod_ssl | < 2.0.52-32.2.ent | mod_ssl-2.0.52-32.2.ent.s390x.rpm |
RedHat | any | i386 | mod_ssl | < 2.0.52-32.2.ent | mod_ssl-2.0.52-32.2.ent.i386.rpm |
RedHat | any | i386 | httpd-manual | < 2.0.52-32.2.ent | httpd-manual-2.0.52-32.2.ent.i386.rpm |
RedHat | any | x86_64 | httpd-suexec | < 2.0.52-32.2.ent | httpd-suexec-2.0.52-32.2.ent.x86_64.rpm |
RedHat | any | s390 | mod_ssl | < 2.0.52-32.2.ent | mod_ssl-2.0.52-32.2.ent.s390.rpm |
RedHat | any | i386 | httpd-devel | < 2.0.52-32.2.ent | httpd-devel-2.0.52-32.2.ent.i386.rpm |
RedHat | any | ia64 | httpd-manual | < 2.0.52-32.2.ent | httpd-manual-2.0.52-32.2.ent.ia64.rpm |