[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

112965

 
 

909

 
 

87888

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

openSUSE-SU-2011:1217-1 -- Suse apache2

ID: oval:org.secpod.oval:def:400337Date: (C)2012-12-31   (M)2018-06-11
Class: PATCHFamily: unix




This update fixes several security issues in the Apache webserver. The patch for the ByteRange remote denial of service attack was refined and the configuration options used by upstream were added. Introduce new config option: Allow MaxRanges Number of ranges requested, if exceeded, the complete content is served. default: 200 0|unlimited: unlimited none: Range headers are ignored. This option is a backport from 2.2.21. Also fixed: CVE-2011-3348: Denial of service in proxy_ajp when using a undefined method. CVE-2011-3368: Exposure of internal servers via reverse proxy methods with mod_proxy enabled and incorrect Rewrite or Proxy Rules.

Platform:
openSUSE 11.4
openSUSE 11.3
Product:
apache2
Reference:
openSUSE-SU-2011:1217-1
CVE-2011-3192
CVE-2011-3348
CVE-2011-3368
CVE    3
CVE-2011-3348
CVE-2011-3192
CVE-2011-3368

© SecPod Technologies