Red Hat Security Advisory: openssl, mm security update for Stronghold
Updated Apache packages are available which fix several serious buffer overflow vulnerabilities in OpenSSL and a local privilege escalation vulnerability in MM.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-0655US | high7.5 | — | ||
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a deni… | ||||
| CVE-2002-0656US | high7.5 | Exploit | ||
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a lar… | ||||
| CVE-2002-0658US | medium6.2 | Exploit | ||
OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. | ||||
| CVE-2002-0659US | medium5.0 | Exploit | ||
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedRed Hat Stronghold 4
We have backported the security fixes for the versions of OpenSSL and mm included in Stronghold 4. The fixed packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. Due to a bug in the update agent, users of Solaris on Intel platforms should create a file "conf/update-agent.conf" in the install root, containing the following two lines: [agent] ignore: RPMPROB_FILTER_IGNOREARCH After the appropriate updates have been applied, it will be necessary to manually restart the server with the following commands: $ bin/stop-server $ bin/start-server
https://access.redhat.com/errata/RHSA-2002:163 - FixedRed Hat Stronghold 4
We have backported the security fixes for the versions of OpenSSL and mm included in Stronghold 4. The fixed packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. Due to a bug in the update agent, users of Solaris on Intel platforms should create a file "conf/update-agent.conf" in the install root, containing the following two lines: [agent] ignore: RPMPROB_FILTER_IGNOREARCH After the appropriate updates have been applied, it will be necessary to manually restart the server with the following commands: $ bin/stop-server $ bin/start-server
https://access.redhat.com/errata/RHSA-2002:163 - FixedRed Hat Stronghold 4
We have backported the security fixes for the versions of OpenSSL and mm included in Stronghold 4. The fixed packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. Due to a bug in the update agent, users of Solaris on Intel platforms should create a file "conf/update-agent.conf" in the install root, containing the following two lines: [agent] ignore: RPMPROB_FILTER_IGNOREARCH After the appropriate updates have been applied, it will be necessary to manually restart the server with the following commands: $ bin/stop-server $ bin/start-server
https://access.redhat.com/errata/RHSA-2002:163 - FixedRed Hat Stronghold 4
We have backported the security fixes for the versions of OpenSSL and mm included in Stronghold 4. The fixed packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. Due to a bug in the update agent, users of Solaris on Intel platforms should create a file "conf/update-agent.conf" in the install root, containing the following two lines: [agent] ignore: RPMPROB_FILTER_IGNOREARCH After the appropriate updates have been applied, it will be necessary to manually restart the server with the following commands: $ bin/stop-server $ bin/start-server
https://access.redhat.com/errata/RHSA-2002:163
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan