RHSA-2004:600

csafUSredhat_csaf

Red Hat Security Advisory: apache, mod_ssl security update

view advisory published 2004-12-13

Updated apache and mod_ssl packages that fix various minor security issues and bugs in the Apache Web server are now available for Red Hat Enterprise Linux 2.1.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2004-0940UShigh7.8Exploit
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via S…
CVE-2004-0885UShigh7.5—
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restriction…
CVE-2003-0987UShigh7.5OT elevated—
mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:600
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan