Test Kennung:	1.3.6.1.4.1.25623.1.0.55507
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-94 (apache, httpd)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to apache, httpd announced via advisory TLSA-2005-94. Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. - The mod_ssl fails to properly enforce client certificates authentication. - The byte-range filter in Apache allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field. An attacker may access web documents in a restricted section of a website without providing a valid client certificate. Allows remote attackers to cause a denial of service of the Apache server. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2005-94 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2700 BugTraq ID: 14721 http://www.securityfocus.com/bid/14721 CERT/CC vulnerability note: VU#744929 http://www.kb.cert.org/vuls/id/744929 Debian Security Information: DSA-805 (Google Search) http://www.debian.org/security/2005/dsa-805 Debian Security Information: DSA-807 (Google Search) http://www.debian.org/security/2005/dsa-807 http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml HPdes Security Advisory: HPSBUX01232 http://marc.info/?l=bugtraq&m=112870296926652&w=2 HPdes Security Advisory: SSRT051043 http://www.mandriva.com/security/advisories?name=MDKSA-2005:161 http://marc.info/?l=apache-modssl&m=112569517603897&w=2 https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/117bc3f09847ebf020b1bb70301ebcc105ddc446856150b63f37f8eb@%3Cdev.httpd.apache.org%3E https://lists.apache.org/thread.html/5b1e7d66c5adf286f14f6cc0f857b6fca107444f68aed9e70eedab47@%3Cdev.httpd.apache.org%3E http://marc.info/?l=bugtraq&m=112604765028607&w=2 http://www.osvdb.org/19188 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10416 http://www.redhat.com/support/errata/RHSA-2005-608.html http://www.redhat.com/support/errata/RHSA-2005-773.html http://www.redhat.com/support/errata/RHSA-2005-816.html http://secunia.com/advisories/16700 http://secunia.com/advisories/16705 http://secunia.com/advisories/16714 http://secunia.com/advisories/16743 http://secunia.com/advisories/16746 http://secunia.com/advisories/16748 http://secunia.com/advisories/16753 http://secunia.com/advisories/16754 http://secunia.com/advisories/16769 http://secunia.com/advisories/16771 http://secunia.com/advisories/16789 http://secunia.com/advisories/16864 http://secunia.com/advisories/16956 http://secunia.com/advisories/17088 http://secunia.com/advisories/17288 http://secunia.com/advisories/17311 http://secunia.com/advisories/17813 http://secunia.com/advisories/19072 http://secunia.com/advisories/19073 http://secunia.com/advisories/21848 http://secunia.com/advisories/22523 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 SuSE Security Announcement: SUSE-SA:2005:051 (Google Search) http://www.novell.com/linux/security/advisories/2005_51_apache2.html SuSE Security Announcement: SUSE-SA:2005:052 (Google Search) http://www.novell.com/linux/security/advisories/2005_52_apache2.html SuSE Security Announcement: SuSE-SA:2006:051 (Google Search) https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html http://www.ubuntu.com/usn/usn-177-1 http://www.vupen.com/english/advisories/2005/1625 http://www.vupen.com/english/advisories/2005/2659 http://www.vupen.com/english/advisories/2006/0789 http://www.vupen.com/english/advisories/2006/4207 Common Vulnerability Exposure (CVE) ID: CVE-2005-2728 BugTraq ID: 14660 http://www.securityfocus.com/bid/14660 http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml HPdes Security Advisory: HPSBUX02074 http://www.securityfocus.com/archive/1/428138/100/0/threaded HPdes Security Advisory: SSRT051251 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760 http://secunia.com/advisories/16559/ http://secunia.com/advisories/17036 http://secunia.com/advisories/17600 http://secunia.com/advisories/17831 http://secunia.com/advisories/17923 http://secunia.com/advisories/18161 http://secunia.com/advisories/18333 http://secunia.com/advisories/18517 SGI Security Advisory: 20060101-01-U ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U http://securityreason.com/securityalert/604 XForce ISS Database: apache-byterange-dos(22006) https://exchange.xforce.ibmcloud.com/vulnerabilities/22006
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.