openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

CentOS Security Advisory CESA-2009:1580 (httpd)

The remote host is missing updates to httpd announced in advisory CESA-2009:1580. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1580 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular We...

Moderate: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the...

CVE-2009-3555: Improper Certificate Validation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

SOL3631 - Stack-based buffer overflow in Apache - CAN-2004-0488

Vulnerability description and product information: Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code by way of a client certificate with a long...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-example-pages apache-doc apache-devel apache modssl For more information, please visit the referenced security advisories. More details may also be...

SLES9: Security update for mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modssl More details may also be found by searching for keyword 5016622 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for apache and mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018822 within t...

SLES9: Security update for mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modssl More details may also be found by searching for keyword 5016622 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014050 within t...

SLES9: Security update for Apache and mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018358 within t...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-devel modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014050 within t...

SLES9: Security update for Apache and mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018358 within t...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-devel modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for apache and mod_ssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018822 within t...

SuSE9 Security Update : Apache (YOU Patch Number 11489)

This update includes a missed security update for Apache 1.3. The problem is already fixed for our Apache2 packages. - modimap: Escape untrusted Referer header before outputting in HTML to avoid potential cross-site scripting. A change was also made to apescapehtml so we escape quotes...

CentOS Security Advisory CESA-2009:1205 (httpd)

The remote host is missing updates to httpd announced in advisory CESA-2009:1205. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1108 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular We...