|
|
| |
|
| |
apache: multiple vulnerabilities
| Package(s): | apache |
CVE #(s): | CVE-2007-6420
CVE-2008-2364
CVE-2008-2939
|
| Created: | December 5, 2008 |
Updated: | December 7, 2009 |
| Description: |
The Apache web server has multiple vulnerabilities.
From the Red Hat vulnerability report:
A flaw was found in the mod_proxy module. An attacker who has control of
a web server to which requests are being proxied could cause a limited
denial of service due to CPU consumption and stack exhaustion. (CVE-2008-2364)
A flaw was found in the mod_proxy_ftp module. Where Apache is configured
to support ftp-over-httpd proxying, a remote attacker could perform a
cross-site scripting attack. (CVE-2008-2939)
A cross-site request forgery issue was found in the mod_proxy_balancer
module. A remote attacker could cause a denial of service if
mod_proxy_balancer is enabled and an authenticated user is targeted.
(CVE-2007-6420) |
| Alerts: |
|
( Log in to post comments)
|
|
|