Paketname
apache
Datum
2002-06-20
Advisory ID
MDKSA-2002:039
Betroffene Versionen
SNF7.2 i586

Problembeschreibung

A Denial of Service attack was discovered by Mark Litchfield in the Apache webserver. As well, while investigating this problem, the Apache Software Foundation discovered that the code for handling invalid requests that use chunked encoding may also allow arbitrary code to be executed on 64bit architectures. All versions of Apache prior to 1.3.26 and 2.0.37 are vulnerable to this problem. A patched version of Apache is currently available for Single Network Firewall 7.2, with patched versions of Apache soon to be available for the other supported Mandrake Linux versions.

Aktualisierte Pakete

SNF7.2 i586

 24f79880c17c12b1a0106c210e46ec9e  snf7.2/RPMS/apache-1.3.20-5.1mdk.i586.rpm
2b8d3b2b0430b78a49fe172e72e7b5a1  snf7.2/RPMS/apache-common-1.3.20-5.1mdk.i586.rpm
d104f95454b1d28035db97df19a6460b  snf7.2/RPMS/apache-devel-1.3.20-5.1mdk.i586.rpm
7180b8f52e477f89a68bc27a220d3ab2  snf7.2/RPMS/apache-manual-1.3.20-5.1mdk.i586.rpm
d9768de21cd57c828deaa36c63839ba0  snf7.2/RPMS/apache-mod_perl-1.3.20_1.24-5.1mdk.i586.rpm
44f05723dc7d10eb6e5590e34b21ce9a  snf7.2/RPMS/apache-mod_perl-devel-1.3.20_1.24-5.1mdk.i586.rpm
dc20b172adaa53806cc055b1f8ffe50a  snf7.2/RPMS/apache-suexec-1.3.20-5.1mdk.i586.rpm
49e9f481c8cc83fff20309e0f24add2e  snf7.2/RPMS/HTML-Embperl-1.3b6-5.1mdk.i586.rpm
5be9ae334cabbd773f43719f2d54853f  snf7.2/SRPMS/apache-1.3.20-5.1mdk.src.rpm

Referenzen