Moderate: Red Hat Security Advisory: httpd security update

Updated Apache httpd packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a powerful, full-featured, efficient, and...

SSA-18706 Security updates for Slackware 8.1

Several security updates are now available for Slackware 8.1, including updated packages for Apache, glibc, modssl, openssh, openssl, and php. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated and is no longer used after a revamping of the Slackware generator. Disabled on...

Slackware 10.0 / 8.1 / 9.0 / 9.1 / current : new mod_ssl packages (SSA:2004-207-02)

New modssl packages are available for Slackware 8.1, 9.0, 9.1, 10.0 and -current to fix a security issue. A format string vulnerability in modproxy hook functions could allow an attacker to run code as the modssl user. Sites using modssl should upgrade be sure to back up your existing key files...

Slackware 8.1 / 9.0 / 9.1 / current : apache security update (SSA:2003-308-01)

Apache httpd is a hypertext transfer protocol server, and is used by over two thirds of the Internet's web sites. Upgraded Apache packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix local vulnerabilities that could allow users who can create or edit Apache config files to...

Slackware 9.0 : mod_ssl RSA blinding fixes (SSA:2003-141-05)

An upgrade for modssl to version 2.8.141.3.27 is now available. This version provides RSA blinding by default which prevents an extended timing analysis from revealing details of the secret key to an attacker. Note that this problem was already fixed within OpenSSL, so this is a 'double fix'. Wit...

FreeBSD : apache+mod_ssl* (1721)

The following package needs to be updated: apache+modssl %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

Slackware 10.0 / 8.1 / 9.0 / 9.1 / current : apache+mod_ssl (SSA:2004-305-01)

New apache packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix a security issue. Apache has been upgraded to version 1.3.33 which fixes a buffer overflow which may allow local users to execute arbitrary code as the apache user. The modssl package has also been upgraded t...

FreeBSD : apache+mod_ssl* (1778)

The following package needs to be updated: apache+modssl %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

FreeBSD : apache+mod_ssl* (2092)

The following package needs to be updated: apache+modssl %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

Slackware 8.1 / 9.0 / 9.1 / current : mod_ssl (SSA:2004-154-01)

New modssl packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. The packages were upgraded to modssl-2.8.18-1.3.31 fixing a buffer overflow that may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN, if modssl is...

Slackware 10.0 / 8.1 / 9.0 / 9.1 / current : apache, mod_ssl, php (SSA:2004-299-01)

New apache and modssl packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. Apache has been upgraded to version 1.3.32 which fixes a heap-based buffer overflow in modproxy. modssl was upgraded from version modssl-2.8.19-1.3.31 to version 2.8.21-1.3.32 whic...

apache -- Certificate Revocation List (CRL) off-by-one vulnerability

Marc Stern reports an off-by-one vulnerability in within modssl. The vulnerability lies in modssl's Certificate Revocation List CRL. If Apache is configured to use a CRL this could allow an attacker to crash a child process causing a Denial of Service...

CVE-2002-1793

The CVE-2002-1793 entry concerns HP-UX 11.04 running VirtualVault OS (VVOS) 4.5–4.6 with the HTTP Server mod_ssl module. The vulnerability arises when the Apache server times out during an SSL request, causing the connection to be closed, which may enable a denial-of-service condition. The Red Ha...

CVE-2002-1793

HTTP Server modssl module running on HP-UX 11.04 with Virtualvault OS VVOS 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service...

CVE-2002-1793: Undefined Security Weakness

HTTP Server modssl module running on HP-UX 11.04 with Virtualvault OS VVOS 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service...

Apache < 2.0.50 Input Header Folding and mod_ssl DoS

Binary data 2744.prm...

HP-UX PHSS_31827 : s700_800 11.04 Virtualvault 4.5 IWS Update

s700800 11.04 Virtualvault 4.5 IWS Update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

HP-UX PHSS_31829 : s700_800 11.04 Webproxy server 2.0 update

s700800 11.04 Webproxy server 2.0 update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

HP-UX PHSS_31828 : s700_800 11.04 Virtualvault 4.5 OWS update

s700800 11.04 Virtualvault 4.5 OWS update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

HP-UX PHSS_31824 : s700_800 11.04 Virtualvault 4.7 OWS update

s700800 11.04 Virtualvault 4.7 OWS update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...