RHSA-2001:126

csafUSredhat_csaf

Red Hat Security Advisory: : Updated apache packages available

Advisory ansehen veröffentlicht 2001-12-04

Updated Apache packages are now available for Red Hat Linux 6.2, 7, 7.1, and 7.2. These packages upgrade the Apache Web server to version 1.3.22, which closes a potential security bug which would present clients with a listing of the contents of a directory instead of the contents of an index file, or in case of an error, the error message.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2001-0730USmedium5.0—
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
CVE-2001-0731USmedium5.0Exploit
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • BehobenRed Hat Linux 6.2

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 6.2

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.0

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.0

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.1

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.1

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.2

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
  • BehobenRed Hat Linux 7.2

    Note: The updated apache (and apache-devel) packages for Red Hat Linux 7, 7.1, and 7.2 require installation of mm and expat (as well as mm-devel and expat-devel for apache-devel). Because mm and expat were not previously released for Red Hat Linux 7, and mm was not previously released for Red Hat Linux 7.1, they will need to either be installed simultaneously with or before the apache packages. Before applying this update, make sure all previously released errata relevant to your system have been applied. Users of Red Hat Linux 7 and 7.1 will find that the mod_bandwidth, mod_put, and mod_throttle packages are now built as separate packages, and that they will need to manually install these packages as well. To update all other RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Users of Red Hat Linux 7 will find that these updates enable the suexec feature by default, which was not the case in previous versions of this package. Administrators who have configured their servers to run CGI scripts from user home directories should read the suexec documentation included in the apache-manual package. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2001:126
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan