Red Hat Security Advisory: apache, openssl security update for Stronghold
Updated versions of cross-platform Stronghold 4 are available to fix a number of vulnerabilities in OpenSSL and Apache.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2003-0083US | medium5.0 | — | ||
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert tho… | ||||
| CVE-2003-0147US | medium5.0OT elevated | — | ||
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the… | ||||
| CVE-2003-0131US | high7.5 | — | ||
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbach… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- FixedRed Hat Stronghold 4
Fixed Stronghold 4 packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2003:116 - FixedRed Hat Stronghold 4
Fixed Stronghold 4 packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2003:116 - FixedRed Hat Stronghold 4
Fixed Stronghold 4 packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2003:116
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan