SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-devel modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for apache and mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018822 within t...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-example-pages apache-doc apache-devel apache modssl For more information, please visit the referenced security advisories. More details may also be...

SLES9: Security update for apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014050 within t...

SLES9: Security update for mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modssl More details may also be found by searching for keyword 5016622 within the SuSE Enterprise Server 9 patch database linked in the references...

SuSE9 Security Update : Apache (YOU Patch Number 11489)

This update includes a missed security update for Apache 1.3. The problem is already fixed for our Apache2 packages. - modimap: Escape untrusted Referer header before outputting in HTML to avoid potential cross-site scripting. A change was also made to apescapehtml so we escape quotes...

CentOS Security Advisory CESA-2009:1205 (httpd)

The remote host is missing updates to httpd announced in advisory CESA-2009:1205. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1108 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular We...

RedHat Security Advisory RHSA-2009:1075

The remote host is missing updates announced in advisory RHSA-2009:1075. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1075 Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and...

RHEL 5 : httpd (RHSA-2009:1075)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1075 advisory. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between mods...

Moderate: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the...

FreeBSD : apache2 -- SSL remote DoS (7b81fc47-239f-11d9-814e-0001020eed82)

The Apache HTTP Server 2.0.51 release notes report that the following issues have been fixed : A segfault in modssl which can be triggered by a malicious remote server, if proxying to SSL servers has been configured. CAN-2004-0751 A potential infinite loop in modssl which could be triggered given...

FreeBSD : Apache 2 mod_ssl denial-of-service (492f8896-70fa-11d8-873f-0020ed76ef5a)

Joe Orton reports a memory leak in Apache 2's modssl. A remote attacker may issue HTTP requests on an HTTPS port, causing an error. Due to a bug in processing this condition, memory associated with the connection is not freed. Repeated requests can result in consuming all available memory...

FreeBSD : mod_ssl -- SSLCipherSuite bypass (4238151d-207a-11d9-bfe2-0090962cff2a)

It is possible for clients to use any cipher suite configured by the virtual host, whether or not a certain cipher suite is selected for a specific directory. This might result in clients using a weaker encryption than originally configured. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

USN-731-1: Apache vulnerabilities

It was discovered that Apache did not sanitize the method specifier header from an HTTP request when it is returned in an error message, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a...

Gentoo Security Advisory GLSA 200406-05 (Apache)

The remote host is missing updates announced in advisory GLSA 200406-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200410-21 (apache)

The remote host is missing updates announced in advisory GLSA 200410-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200509-12 (Apache)

The remote host is missing updates announced in advisory GLSA 200509-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-18 (mod_ssl)

The remote host is missing updates announced in advisory GLSA 200407-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...