RHSA-2002:118

csafUSredhat_csaf

Red Hat Security Advisory: apache security update for Stronghold

view advisory published 2002-06-20

The Apache Web server contains a security vulnerability which can be used to launch a denial of service attack, or in some cases, allow remote code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2002-0392UShigh7.5Exploit
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedRed Hat Stronghold 3

    We have backported the security fix from the official Apache 1.3.26 release. The patch and instructions on how to apply it are available from the Stronghold resource center at http://stronghold.redhat.com/. Stronghold 3: http://stronghold.redhat.com/sh3/errata-2002-118 Stronghold 4: http://stronghold.redhat.com/sh4/errata-2002-118 Updated packages will also be made available shortly from the same URLs.

    https://access.redhat.com/errata/RHSA-2002:118
  • FixedRed Hat Stronghold 4

    We have backported the security fix from the official Apache 1.3.26 release. The patch and instructions on how to apply it are available from the Stronghold resource center at http://stronghold.redhat.com/. Stronghold 3: http://stronghold.redhat.com/sh3/errata-2002-118 Stronghold 4: http://stronghold.redhat.com/sh4/errata-2002-118 Updated packages will also be made available shortly from the same URLs.

    https://access.redhat.com/errata/RHSA-2002:118
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan