| Description: | Description:
The remote host is missing an update to httpd
announced via advisory FEDORA-2007-617.
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
Update Information:
The Apache HTTP Server did not verify that a process was an
Apache child process before sending it signals. A local
attacker with the ability to run scripts on the Apache HTTP
Server could manipulate the scoreboard and cause arbitrary
processes to be terminated which could lead to a denial of
service (CVE-2007-3304). This issue is not exploitable on
Fedora if using the default SELinux targeted policy.
A flaw was found in the Apache HTTP Server mod_status
module. On sites where the server-status page is publicly
accessible and ExtendedStatus is enabled this could lead to
a cross-site scripting attack. On Fedora the server-status
page is not enabled by default and it is best practice to
not make this publicly available. (CVE-2006-5752)
A bug was found in the Apache HTTP Server mod_cache module.
On sites where caching is enabled, a remote attacker could
send a carefully crafted request that would cause the Apache
child process handling that request to crash. This could
lead to a denial of service if using a threaded
Multi-Processing Module. (CVE-2007-1863)
* Tue Jun 26 2007 Joe Orton 2.2.2-1.3
- add security fixes for CVE-2006-5752, CVE-2007-1863 and
CVE-2007-3304 (#244660)
* Wed Jul 26 2006 Joe Orton 2.2.2-1.2
- add mod_rewrite security fix (CVE-2006-3747)
* Wed Jul 19 2006 Joe Orton 2.2.2-1.1
- fix segfault on dummy connection failure at graceful restart (#199429)
* Thu May 11 2006 Joe Orton 2.2.2-1.0
- update to 2.2.2
* Thu Apr 6 2006 Joe Orton 2.2.0-5.2
- fix LDAP issues on 64-bit platforms (#188073)
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2007-617
Risk factor : High
CVSS Score:
7.6
|
