Red Hat Security Advisory: apache, openssl, php security update for Stronghold
Updated versions of Stronghold 3.0 are available to fix a number of vulnerabilities in OpenSSL, Apache, and PHP.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2003-0083US | medium5.0 | — | ||
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert tho… | ||||
| CVE-2003-0020US | medium5.0 | — | ||
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerab… | ||||
| CVE-2003-0078US | medium5.0 | Exploit | ||
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an infor… | ||||
| CVE-2002-1376US | high7.5 | — | ||
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routi… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL, Apache and PHP included in Stronghold 3. Stronghold 3.0 build code 3021 is now available which includes these fixes, and can be downloaded from http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:104 - FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL, Apache and PHP included in Stronghold 3. Stronghold 3.0 build code 3021 is now available which includes these fixes, and can be downloaded from http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:104 - FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL, Apache and PHP included in Stronghold 3. Stronghold 3.0 build code 3021 is now available which includes these fixes, and can be downloaded from http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:104 - FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL, Apache and PHP included in Stronghold 3. Stronghold 3.0 build code 3021 is now available which includes these fixes, and can be downloaded from http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:104
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan