Lucene search
SuseSUSE-SA:2005:046HistoryAug 16, 2005 - 8:42 a.m.
authentication bypass in apache,apache2
2005-08-1608:42:40
lists.opensuse.org
12
0.975 High
EPSS
Percentile
100.0%
A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to “smuggle” requests past filters by providing handcrafted header entries.
Solution
None, please install the updated packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 9.1 | x86_64 | apache2-worker | < 2.0.49-27.29 | apache2-worker-2.0.49-27.29.x86_64.rpm |
| openSUSE | 9.2 | i586 | apache2-prefork | < 2.0.50-7.4 | apache2-prefork-2.0.50-7.4.i586.rpm |
| openSUSE | 9.1 | i586 | apache2-devel | < 2.0.49-27.29 | apache2-devel-2.0.49-27.29.i586.rpm |
| openSUSE | 8.2 | i586 | apache2-prefork | < 2.0.48-152 | apache2-prefork-2.0.48-152.i586.rpm |
| openSUSE | 9.0 | x86_64 | apache2-devel | < 2.0.48-152 | apache2-devel-2.0.48-152.x86_64.rpm |
| openSUSE | 9.2 | i586 | apache2 | < 2.0.50-7.4 | apache2-2.0.50-7.4.i586.rpm |
| openSUSE | 9.1 | x86_64 | libapr0 | < 2.0.49-27.29 | libapr0-2.0.49-27.29.x86_64.rpm |
| openSUSE | 8.2 | i586 | apache2 | < 2.0.48-152 | apache2-2.0.48-152.i586.rpm |
| openSUSE | 9.1 | x86_64 | apache2-example-pages | < 2.0.49-27.29 | apache2-example-pages-2.0.49-27.29.x86_64.rpm |
| openSUSE | 9.0 | i586 | apache2-metuxmpm | < 2.0.48-152 | apache2-metuxmpm-2.0.48-152.i586.rpm |
Related
nessus
nessus
Fedora Core 3 : httpd-2.0.53-3.2 (2005-638)
2005-08-03 00:00:00
SUSE-SA:2005:046: apache,apache2
2005-10-05 00:00:00
Mandrake Linux Security Advisory : apache2 (MDKSA-2005:129)
2005-10-05 00:00:00
openvas
openvas
SLES9: Security update for Apache 2 oes/CORE
2009-10-10 00:00:00
SLES9: Security update for Apache 2 oes/CORE
2009-10-10 00:00:00
Debian Security Advisory DSA 805-1 (apache2)
2008-01-17 00:00:00
ubuntu
ubuntu
Apache 2 vulnerabilities
2005-08-04 00:00:00
centos
centos
httpd, mod_ssl security update
2005-07-25 10:13:58
redhat
redhat
(RHSA-2005:582) httpd security update
2005-07-25 00:00:00
osv
osv
apache2 - several
2005-09-08 00:00:00
apache - programming error
2005-09-08 00:00:00
debian
debian
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
2005-09-08 18:07:44
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
2005-09-08 18:07:44
[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling
2005-09-08 06:00:50
ubuntucve
ubuntucve
CVE-2005-1268
2005-08-05 00:00:00
CVE-2005-2088
2005-07-05 00:00:00
freebsd
freebsd
apache -- http request smuggling
2005-07-25 00:00:00
apache -- Certificate Revocation List (CRL) off-by-one vulnerability
2005-07-12 00:00:00
debiancve
debiancve
CVE-2005-1268
2005-08-05 04:00:00
CVE-2005-2088
2005-07-05 04:00:00
cve
cve
CVE-2005-1268
2005-08-05 04:00:00
CVE-2005-2088
2005-07-05 04:00:00
httpd
httpd
Apache Httpd < 2.0.55 : HTTP Request Spoofing
2005-10-14 00:00:00
Apache Httpd < 2.0.55 : Malicious CRL off-by-one
2005-10-14 00:00:00