Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

apache: denial of service

Package(s):

apache

CVE #(s):

Created:

May 11, 2006

Updated:

May 17, 2006

Description:

There a bug involving Apache 1.3.35 and glib concerning wildcards in Include directives. If an Include statement is issued in an already included file, Apache can be caused to crash.

Alerts:

Slackware

SSA:2006-130-01

2006-05-11

(Log in to post comments)

apache: denial of service

Posted May 25, 2006 8:49 UTC (Thu) by mjcox@redhat.com (subscriber, #31775) [Link]

This is not a security issue; it looks like Slackware did a security update for Apache but that update was buggy so they had to reissue it due to this bug. This issue is simply that Apache won't start due to a config parsing bug, it's not a security issue.