MDVSA-2012:154-1 -- Mandriva apacheID: oval:org.secpod.oval:def:302967 | Date: (C)2012-11-26 (M)2023-12-07 |
Class: PATCH | Family: unix |
Multiple vulnerabilities has been found and corrected in apache : Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched for DSOs. This could allow a local user to execute code as root if an administrator runs apachectl from an untrusted directory . Possible XSS for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled . The updated packages have been upgraded to the latest 2.2.23 version which is not vulnerable to these issues. Update: Packages for Mandriva Linux 2011 is also being provided.
Platform: |
Mandriva Linux 2011.0 |