[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

openSUSE-SU-2011:1217-1 -- Suse apache2

ID: oval:org.secpod.oval:def:400337Date: (C)2012-12-31   (M)2017-09-22
Class: PATCHFamily: unix




This update fixes several security issues in the Apache webserver. The patch for the ByteRange remote denial of service attack was refined and the configuration options used by upstream were added. Introduce new config option: Allow MaxRanges Number of ranges requested, if exceeded, the complete content is served. default: 200 0|unlimited: unlimited none: Range headers are ignored. This option is a backport from 2.2.21. Also fixed: CVE-2011-3348: Denial of service in proxy_ajp when using a undefined method. CVE-2011-3368: Exposure of internal servers via reverse proxy methods with mod_proxy enabled and incorrect Rewrite or Proxy Rules.

Platform:
openSUSE 11.4
openSUSE 11.3
Product:
apache2
Reference:
openSUSE-SU-2011:1217-1
CVE-2011-3192
CVE-2011-3348
CVE-2011-3368
CVE    3
CVE-2011-3348
CVE-2011-3192
CVE-2011-3368

© 2013 SecPod Technologies