[CLA-2004:868] Conectiva Security Announcement - apache

Conectiva Updates · 24/09/04 18:15

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------

PACKAGE : apache
SUMMARY : Several vulnerabilities in apache, mod_ssl and mod_dav
DATE : 2004-09-23 12:10:00
ID : CLA-2004:868
RELEVANT
RELEASES : 9, 10

- -------------------------------------------------------------------------

DESCRIPTION
Apache[1] is the most popular webserver in use today.

This announcement fixes the following issues with apache, mod_ssl and
mod_dav:

1. Denial of service in ap_get_mime_headers_core() function
(CAN-2004-0493[2])

The ap_get_mime_headers_core() function in Apache httpd 2.0.49 allows
remote attackers to cause a denial of service (memory exhaustion).

2. Buffer overflow in .htaccess files handler (CAN-2004-0747[3])

Buffer overflow in Apache 2.0.50 and earlier allows local attackers
to gain apache privileges via a .htaccess file that causes the buffer
overflow during expansion of environment variables.

3. Denial of service in mod_ssl (CAN-2004-0748[4])

mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause
a denial of service (CPU consumption) by aborting an SSL connection
in a way that causes an Apache child process to enter an infinite
loop.

4. Denial of service in char_buffer_read() function in mod_ssl
(CAN-2004-0751[5])

The char_buffer_read function in the mod_ssl module for Apache 2.x,
when using reverse proxying to an SSL server, allows remote attackers
to cause a denial of service (segmentation fault).

5. Denial of service in IPv6 URI parsing routines (CAN-2004-0786[6])

The IPv6 URI parsing routines in the apr-util library for Apache
2.0.50 and earlier allow remote attackers to cause a denial of
service (child process crash) via a certain URI, as demonstrated
using the Codenomicon HTTP Test Tool.

6. Denial of service in mod_dav (CAN-2004-0809[7])

The mod_dav module in Apache 2.0.50 and earlier allows remote
attackers to cause a denial of service (child process crash) via a
certain sequence of LOCK requests for a location that allows WebDAV
authoring access.

SOLUTION
It is recommended that all Apache users upgrade their packages.

IMPORTANT: it is necessary to manually restart the httpd server after
upgrading the packages. In order to do this, execute the following as
ro

Onderwerp Gereedschap

Toon

Onderwerp: [CLA-2004:868] Conectiva Security Announcement - apache

[CLA-2004:868] Conectiva Security Announcement - apache

Webhostingtalk.nl

Link met ons

Partners

Contact