apache: unknown vulnerability [LWN.net]

Package(s):

apache httpd

CVE #(s):

CVE-2010-0408

Created:

March 3, 2010

Updated:

September 14, 2010

Description:

The mod_proxy_ajp module packaged with Apache 2.2.x suffers from an unknown vulnerability when faced with a protocol error.

Alerts:

Gentoo	201206-25	apache	2012-06-24
rPath	rPSA-2010-0056-1	httpd	2010-09-13
Fedora	FEDORA-2010-6055	httpd	2010-04-09
Fedora	FEDORA-2010-6131	httpd	2010-04-09
SuSE	SUSE-SR:2010:010	krb5, clamav, systemtap, apache2, glib2, mediawiki, apache	2010-04-27
Debian	DSA-2035-1	apache2	2010-04-17
Pardus	2010-45	apache-2.2.15-36-11 apache-2.2.15-34-12	2010-03-29
CentOS	CESA-2010:0168	httpd	2010-03-28
Red Hat	RHSA-2010:0168-01	httpd	2010-03-25
Ubuntu	USN-908-1	apache2	2010-03-10
Slackware	SSA:2010-067-01	httpd	2010-03-09
Mandriva	MDVSA-2010:053	apache	2010-03-02

The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.