httpd: disrepects dirty flag [LWN.net]

Package(s):

httpd apache

CVE #(s):

CVE-2013-2249

Created:

August 6, 2013

Updated:

August 12, 2013

Description:

From the CVE entry:

mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.

Alerts:

Slackware	SSA:2013-218-02	2013-08-06
Fedora	FEDORA-2013-13994	2013-08-09
Fedora	FEDORA-2013-13922	2013-08-16

(Log in to post comments)