Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.68 | >= 2.4.68 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache HTTPD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.68"
Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.62 | >= 2.4.62 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache HTTPD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.62"
Multiple vulnerabilities have been discovered in Apache HTTPD, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.56 | >= 2.4.56 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache HTTPD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.56"
Multiple vulnerabilities have been discovered in Apache Webserver, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/apache-tools | * | < 2.4.54 | >= 2.4.54 |
| www-servers/apache | * | < 2.4.54 | >= 2.4.54 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache HTTPD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.54"
All Apache HTTPD tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/apache-tools-2.4.54"
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.48 | >= 2.4.48 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.48"
Multiple vulnerabilities have been found in Apache, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.46 | >= 2.4.46 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.46"
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.41 | >= 2.4.41 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.41"
A vulnerability in Apache might allow an attacker to escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.39 | >= 2.4.39 |
The Apache HTTP server is one of the most popular web servers on the Internet.
A vulnerability was discovered in Apache with MPM event, worker, or prefork.
An attacker could escalate privileges.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.39"
Multiple vulnerabilities have been found in Apache Web Server, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.38-r1 | >= 2.4.38-r1 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details.
A remote attacker can possibly cause a Denial of Service condition or could bypass mod_session_cookie expiration time.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.38-r1"
Multiple vulnerabilities have been found in Apache, the worst of which may result in the loss of secrets.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.27-r1 | >= 2.4.27-r1 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the referenced CVE identifiers for details.
The Optionsbleed vulnerability can leak arbitrary memory from the server process that may contain secrets. Additionally attackers may cause a Denial of Service condition, bypass authentication, or cause information loss.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.27-r1"
Multiple vulnerabilities have been found in Apache, the worst of which could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.25 | >= 2.4.25 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers, upstream Apache Software Foundation documentation, and HTTPoxy website referenced below for details.
A remote attacker could cause a Denial of Service condition via multiple vectors or response splitting and cache pollution. Additionally, an attacker could intercept unsecured (HTTP) transmissions via the HTTPoxy vulnerability.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.25"
Multiple vulnerabilities have been found in Apache, the worst of which could allow HTTP request smuggling attacks or a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.4.23 | >= 2.2.31 (revision), >= 2.4.23 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.
Remote attackers could bypass intended access restrictions, conduct HTTP request smuggling attacks, or cause a Denial of Service condition.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.23"
Multiple vulnerabilities have been found in Apache HTTP Server, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.29 | >= 2.2.29 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.
A remote attacker may be able to execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.29"
Multiple vulnerabilities have been discovered in Apache HTTP Server, the worse of which could lead to execution of arbitrary code or a Denial of Service condition
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.27-r4 | >= 2.2.27-r4 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been found in Apache HTTP Server. Please review the CVE identifiers referenced below for details.
A remote attacker could send a specially crafted request to possibly execute arbitrary code, cause Denial of Service, or obtain sensitive information.
There is no known workaround at this time.
All Apache HTTP Server users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.27-r4"
Multiple vulnerabilities have been discovered in Apache HTTP Server, possibly allowing remote attackers to execute arbitrary code, cause a Denial of Service condition or perform man-in-the-middle attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.25 | >= 2.2.25 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been found in Apache HTTP Server. Please review the CVE identifiers and research paper referenced below for details.
A remote attacker could send a specially crafted request to possibly execute arbitrary code, cause Denial of Service, or obtain sensitive information.
There is no known workaround at this time.
All Apache HTTP Server users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.25"
Multiple vulnerabilities were found in Apache HTTP Server.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.22-r1 | >= 2.2.22-r1 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.
A remote attacker might obtain sensitive information, gain privileges, send requests to unintended servers behind proxies, bypass certain security restrictions, obtain the values of HTTPOnly cookies, or cause a Denial of Service in various ways.
A local attacker could gain escalated privileges.
There is no known workaround at this time.
All Apache HTTP Server users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.22-r1"
Multiple vulnerabilities in the Apache HTTP daemon allow for local privilege escalation, information disclosure or Denial of Service attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.11-r2 | >= 2.2.11-r2 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in the Apache HTTP server:
A local attacker could circumvent restrictions put up by the server administrator and execute arbitrary commands with the privileges of the user running the Apache server. A remote attacker could send multiple requests to a server with the AJP proxy module, possibly resulting in the disclosure of a request intended for another client, or cause a Denial of Service by sending specially crafted requests to servers running mod_proxy_http or mod_deflate.
Remove "include", "proxy_ajp", "proxy_http" and "deflate" from APACHE2_MODULES in make.conf and rebuild Apache, or disable the aforementioned modules in the Apache configuration.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.11-r2"
Multiple vulnerabilities in Apache might lead to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.9 | >= 2.2.9 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache:
A remote attacker could exploit these vulnerabilities by connecting to an Apache httpd, by causing an Apache proxy server to connect to a malicious server, or by enticing a balancer administrator to connect to a specially-crafted URL, resulting in a Denial of Service of the Apache daemon.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.9"
Multiple vulnerabilities have been discovered in Apache.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.8 | >= 2.2.8 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Adrian Pastor and Amir Azam (ProCheckUp) reported that the HTTP Method specifier header is not properly sanitized when the HTTP return code is "413 Request Entity too large" (CVE-2007-6203). The mod_proxy_balancer module does not properly check the balancer name before using it (CVE-2007-6422). The mod_proxy_ftp does not define a charset in its answers (CVE-2008-0005). Stefano Di Paola (Minded Security) reported that filenames are not properly sanitized within the mod_negotiation module (CVE-2008-0455, CVE-2008-0456).
A remote attacker could entice a user to visit a malicious URL or send specially crafted HTTP requests (i.e using Adobe Flash) to perform Cross-Site Scripting and HTTP response splitting attacks, or conduct a Denial of Service attack on the vulnerable web server.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.2.8"
Multiple vulnerabilities have been discovered in Apache, possibly resulting in a Denial of Service or the disclosure of sensitive information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.2.6 | >= 2.0.59-r5 (revision), >= 2.2.6 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple cross-site scripting vulnerabilities have been discovered in mod_status and mod_autoindex (CVE-2006-5752, CVE-2007-4465). An error has been discovered in the recall_headers() function in mod_mem_cache (CVE-2007-1862). The mod_cache module does not properly sanitize requests before processing them (CVE-2007-1863). The Prefork module does not properly check PID values before sending signals (CVE-2007-3304). The mod_proxy module does not correctly check headers before processing them (CVE-2007-3847).
A remote attacker could exploit one of these vulnerabilities to inject arbitrary script or HTML content, obtain sensitive information or cause a Denial of Service.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.0.59-r5"
A flaw in mod_rewrite could result in a Denial of Service or the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.0.58-r2 | >= 1.3.34-r14 (revision), >= 1.3.37 (revision), >= 2.0.58-r2 |
The Apache HTTP server is one of the most popular web servers on the Internet. The Apache module mod_rewrite provides a rule-based engine to rewrite requested URLs on the fly.
An off-by-one flaw has been found in Apache's mod_rewrite module by Mark Dowd of McAfee Avert Labs. This flaw is exploitable depending on the types of rewrite rules being used.
A remote attacker could exploit the flaw to cause a Denial of Service or execution of arbitrary code. Note that Gentoo Linux is not vulnerable in the default configuration.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose www-servers/apache
Apache can be exploited for cross-site scripting attacks and is vulnerable to a Denial of Service attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.0.55-r1 | >= 2.0.55-r1, >= 2.0.54-r16 (revision), = 1.3.34-r2, >= 1.3.34-r11 (revision), >= 1.3.37 (revision) |
The Apache HTTP server is one of the most popular web servers on the Internet. mod_imap provides support for server-side image maps; mod_ssl provides secure HTTP connections.
Apache's mod_imap fails to properly sanitize the "Referer" directive of imagemaps in some cases, leaving the HTTP Referer header unescaped. A flaw in mod_ssl can lead to a NULL pointer dereference if the site uses a custom "Error 400" document. These vulnerabilities were reported by Marc Cox and Hartmut Keil, respectively.
A remote attacker could exploit mod_imap to inject arbitrary HTML or JavaScript into a user's browser to gather sensitive information. Attackers could also cause a Denial of Service on hosts using the SSL module (Apache 2.0.x only).
There is no known workaround at this time.
All Apache users should upgrade to the latest version, depending on whether they still use the old configuration style (/etc/apache/conf/*.conf) or the new one (/etc/apache2/httpd.conf).
2.0.x users, new style config:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.0.55-r1"
2.0.x users, old style config:
# emerge --sync # emerge --ask --oneshot --verbose "=www-servers/apache-2.0.54-r16"
1.x users, new style config:
# emerge --sync # emerge --ask --oneshot --verbose "=www-servers/apache-1.3.34-r11"
1.x users, old style config:
# emerge --sync # emerge --ask --oneshot --verbose "=www-servers/apache-1.3.34-r2"
mod_ssl and Apache are vulnerable to a restriction bypass and a potential local privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-www/mod_ssl | * | < 2.8.24 | >= 2.8.24 |
| www-servers/apache | * | < 2.0.54-r15 | >= 2.0.54-r15, < 2 |
The Apache HTTP server is one of the most popular web servers on the Internet. mod_ssl provides SSL v2/v3 and TLS v1 support for Apache 1.3 and is also included in Apache 2.
mod_ssl contains a security issue when "SSLVerifyClient optional" is configured in the global virtual host configuration (CAN-2005-2700). Also, Apache's httpd includes a PCRE library, which makes it vulnerable to an integer overflow (CAN-2005-2491).
Under a specific configuration, mod_ssl does not properly enforce the client-based certificate authentication directive, "SSLVerifyClient require", in a per-location context, which could be potentially used by a remote attacker to bypass some restrictions. By creating a specially crafted ".htaccess" file, a local attacker could possibly exploit Apache's vulnerability, which would result in a local privilege escalation.
There is no known workaround at this time.
All mod_ssl users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-www/mod_ssl-2.8.24"
All Apache 2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.0.54-r15"
A bug in Apache may allow a remote attacker to perform a Denial of Service attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.0.54-r9 | >= 2.0.54-r9, < 2.0 |
The Apache HTTP Server Project is a featureful, freely-available HTTP (Web) server.
Filip Sneppe discovered that Apache improperly handles byterange requests to CGI scripts.
A remote attacker may access vulnerable scripts in a malicious way, exhausting all RAM and swap space on the server, resulting in a Denial of Service of the Apache server.
There is no known workaround at this time.
All apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.0.54-r9"
A flaw in Apache 2.0 could allow a remote attacker to cause a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.0.52-r1 | >= 2.0.52-r1, < 2.0 |
The Apache HTTP Server is one of the most popular web servers on the Internet.
Chintan Trivedi discovered a vulnerability in Apache httpd 2.0 that is caused by improper enforcing of the field length limit in the header-parsing code.
By sending a large amount of specially-crafted HTTP GET requests a remote attacker could cause a Denial of Service of the targeted system.
There is no known workaround at this time.
All Apache 2.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.0.52-r1"
A buffer overflow vulnerability exists in mod_include which could possibly allow a local attacker to gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 1.3.32-r1 | >= 1.3.32-r1 |
The Apache HTTP server is one of the most popular web servers on the internet. mod_include is an Apache module to handle Server Side Includes (SSI).
A possible buffer overflow exists in the get_tag() function of mod_include.c.
If Server Side Includes (SSI) are enabled, a local attacker may be able to run arbitrary code with the rights of an httpd child process by making use of a specially-crafted document with malformed SSI.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-1.3.32-r1"
In certain configurations, it can be possible to bypass restrictions set by the "SSLCipherSuite" directive of mod_ssl.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-www/mod_ssl | * | < 2.8.20 | >= 2.8.20 |
| www-servers/apache | * | < 2.0.52 | >= 2.0.52, < 2.0 |
The Apache HTTP server is one of the most popular web servers on the internet. mod_ssl provides SSL v2/v3 and TLS v1 support for Apache 1.3 and is also included in Apache 2.
A flaw has been found in mod_ssl where the "SSLCipherSuite" directive could be bypassed in certain configurations if it is used in a directory or location context to restrict the set of allowed cipher suites.
A remote attacker could gain access to a location using any cipher suite allowed by the server/virtual host configuration, disregarding the restrictions by "SSLCipherSuite" for that location.
There is no known workaround at this time.
All Apache 2 users should upgrade to the latest version:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.52" # emerge ">=www-servers/apache-2.0.52"
All mod_ssl users should upgrade to the latest version:
# emerge sync # emerge -pv ">=net-www/mod_ssl-2.8.20" # emerge ">=net-www/mod_ssl-2.8.20"
A bug in the way Apache handles the Satisfy directive can lead to the exposure of protected directories to unauthorized users.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | = 2.0.51 | >= 2.0.51-r1, < 2.0.51 |
The Apache HTTP server is one of most popular web servers on the Internet.
A bug in the way Apache handles the Satisfy directive, which is used to require that certain conditions (client host, client authentication, etc) be met before access to a certain directory is granted, could allow the exposure of protected directories to unauthorized clients.
Directories containing protected data could be exposed to all visitors to the webserver.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.51-r1" # emerge ">=www-servers/apache-2.0.51-r1"
Several vulnerabilities have been found in Apache 2 and mod_dav for Apache 1.3 which could allow a remote attacker to cause a Denial of Service or a local user to get escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-www/mod_dav | * | <= 1.0.3-r1 | >= 1.0.3-r2 |
| www-servers/apache | * | < 2.0.51 | >= 2.0.51, < 2.0 |
The Apache HTTP server is one of most popular web servers on the internet. mod_ssl provides SSL v2/v3 and TLS v1 support for it and mod_dav is the Apache module for Distributed Authoring and Versioning (DAV).
A potential infinite loop has been found in the input filter of mod_ssl (CAN-2004-0748) as well as a possible segmentation fault in the char_buffer_read function if reverse proxying to a SSL server is being used (CAN-2004-0751). Furthermore, mod_dav, as shipped in Apache httpd 2 or mod_dav 1.0.x for Apache 1.3, contains a NULL pointer dereference which can be triggered remotely (CAN-2004-0809). The third issue is an input validation error found in the IPv6 URI parsing routines within the apr-util library (CAN-2004-0786). Additionally a possible buffer overflow has been reported when expanding environment variables during the parsing of configuration files (CAN-2004-0747).
A remote attacker could cause a Denial of Service either by aborting a SSL connection in a special way, resulting in CPU consumption, by exploiting the segmentation fault in mod_ssl or the mod_dav flaw. A remote attacker could also crash a httpd child process by sending a specially crafted URI. The last vulnerabilty could be used by a local user to gain the privileges of a httpd child, if the server parses a carefully prepared .htaccess file.
There is no known workaround at this time.
All Apache 2 users should upgrade to the latest version:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.51" # emerge ">=www-servers/apache-2.0.51"
All mod_dav users should upgrade to the latest version:
# emerge sync # emerge -pv ">=net-www/mod_dav-1.0.3-r2" # emerge ">=net-www/mod_dav-1.0.3-r2"
A bug in Apache may allow a remote attacker to perform a Denial of Service attack. With certain configurations this could lead to a heap based buffer overflow.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | <= 2.0.49-r3 | >= 2.0.49-r4, < 2 |
The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards.
A bug in the protocol.c file handling header lines will cause Apache to allocate memory for header lines starting with TAB or SPACE.
An attacker can exploit this vulnerability to perform a Denial of Service attack by causing Apache to exhaust all memory. On 64 bit systems with more than 4GB of virtual memory a possible integer signedness error could lead to a buffer based overflow causing Apache to crash and under some circumstances execute arbitrary code as the user running Apache, usually "apache".
There is no known workaround at this time. All users are encouraged to upgrade to the latest available version:
Apache 2 users should upgrade to the latest version of Apache:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.49-r4" # emerge ">=www-servers/apache-2.0.49-r4"
A bug in mod_proxy may allow a remote attacker to execute arbitrary code when Apache is configured a certain way.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | <= 1.3.31-r1 | >= 1.3.31-r2 |
The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards.
A bug in the proxy_util.c file may lead to a remote buffer overflow. To trigger the vulnerability an attacker would have to get mod_proxy to connect to a malicous server which returns an invalid (negative) Content-Length.
An attacker could cause a Denial of Service as the Apache child handling the request, which will die and under some circumstances execute arbitrary code as the user running Apache, usually "apache".
There is no known workaround at this time. All users are encouraged to upgrade to the latest available version:
Apache 1.x users should upgrade to the latest version of Apache:
# emerge sync # emerge -pv ">=www-servers/apache-1.3.31-r2" # emerge ">=www-servers/apache-1.3.31-r2"
A bug in mod_ssl may allow a remote attacker to execute remote code when Apache is configured a certain way.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-www/mod_ssl | * | < 2.8.18 | >= 2.8.18 |
| www-servers/apache | * | <= 2.0.49-r2 | < 2.0, >= 2.0.49-r3 |
Apache is the most popular Web server on the Internet. mod_ssl provides Secure Sockets Layer encryption and authentication to Apache 1.3. Apache 2 contains the functionality of mod_ssl.
A bug in the function ssl_util_uuencode_binary in ssl_util.c may lead to a remote buffer overflow on a server configured to use FakeBasicAuth that will trust a client certificate with an issuing CA with a subject DN longer than 6k.
Given the right server configuration, an attacker could cause a Denial of Service or execute code as the user running Apache, usually "apache". It is thought to be impossible to exploit this to execute code on the x86 platform, but the possibility for other platforms is unknown. This does not preclude a DoS on x86 systems.
A server should not be vulnerable if it is not configured to use FakeBasicAuth and to trust a client CA with a long subject DN.
Apache 1.x users should upgrade to the latest version of mod_ssl:
# emerge sync # emerge -pv ">=net-www/mod_ssl-2.8.18" # emerge ">=net-www/mod_ssl-2.8.18"
Apache 2.x users should upgrade to the latest version of Apache:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.49-r3" # emerge ">=www-servers/apache-2.0.49-r3"
Several security vulnerabilities have been fixed in the latest release of Apache 1.3.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 1.3.31 | >= 1.3.31 |
The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards.
On 64-bit big-endian platforms, mod_access does not properly parse Allow/Deny rules using IP addresses without a netmask which could result in failure to match certain IP addresses.
Terminal escape sequences are not filtered from error logs. This could be used by an attacker to insert escape sequences into a terminal emulater vulnerable to escape sequences.
mod_digest does not properly verify the nonce of a client response by using a AuthNonce secret. This could permit an attacker to replay the response of another website. This does not affect mod_auth_digest.
On certain platforms there is a starvation issue where listening sockets fails to handle short-lived connection on a rarely-accessed listening socket. This causes the child to hold the accept mutex and block out new connections until another connection arrives on the same rarely-accessed listening socket thus leading to a denial of service.
These vulnerabilities could lead to attackers bypassing intended access restrictions, denial of service, and possibly execution of arbitrary code.
There is no known workaround at this time.
All users should upgrade to the latest stable version of Apache 1.3.
# emerge sync # emerge -pv ">=www-servers/apache-1.3.31" # emerge ">=www-servers/apache-1.3.31"
A memory leak in mod_ssl allows a remote denial of service attack against an SSL-enabled server via plain HTTP requests. Another flaw was found when arbitrary client-supplied strings can be written to the error log, allowing the exploit of certain terminal emulators. A third flaw exists with the mod_disk_cache module.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | <= 2.0.48 | >= 2.0.49 |
The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards.
Three vulnerabilities were found:
No special privileges are required for these vulnerabilities. As a result, all users are recommended to upgrade their Apache installations.
There is no immediate workaround; a software upgrade is required. There is no workaround for the mod_disk_cache issue; users are recommended to disable the feature on their servers until a patched version is released.
Users are urged to upgrade to Apache 2.0.49:
# emerge sync # emerge -pv ">=www-servers/apache-2.0.49" # emerge ">=www-servers/apache-2.0.49" # ** IMPORTANT ** # If you are migrating from Apache 2.0.48-r1 or earlier versions, # it is important that the following directories are removed. # The following commands should cause no data loss since these # are symbolic links. # rm /etc/apache2/lib /etc/apache2/logs /etc/apache2/modules # rm /etc/apache2/modules # ** ** ** ** ** # ** ALSO NOTE ** # Users who use mod_disk_cache should edit their Apache # configuration and disable mod_disk_cache.
Multiple stack-based buffer overflows in mod_alias and mod_rewrite can allow execution of arbitrary code and cause a denial of service, and a bug in the way mod_cgid handles CGI redirect paths could result in CGI output going to the wrong client.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 2.0.48 | >= 2.0.48, < 2.0 |
The Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple stack-based buffer overflows in mod_alias and mod_rewrite allow attackers who can create or edit configuration files including .htaccess files, to cause a denial of service and execute arbitrary code via a regular expression containing more than 9 captures, and a bug in the way mod_cgid handles CGI redirect paths could result in CGI output going to the wrong client when a threaded MPM is used, resulting in an information disclosure.
An attacker may cause a denial of service or execute arbitrary code with the privileges of the user that is running apache.
There is no known workaround at this time.
It is recommended that all Gentoo Linux users who are running net-misc/apache 2.x upgrade:
# emerge sync # emerge -pv '>=www-servers/apache-2.0.48' # emerge '>=www-servers/apache-2.0.48' # emerge clean # /etc/init.d/apache2 restart
Please remember to update your config files in /etc/apache2 as --datadir has been changed to /var/www/localhost.
Multiple stack-based buffer overflows in mod_alias and mod_rewrite can allow execution of arbitrary code and cause a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/apache | * | < 1.3.29 | >= 1.3.29 |
The Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple stack-based buffer overflows in mod_alias and mod_rewrite allow attackers who can create or edit configuration files including .htaccess files, to cause a denial of service and execute arbitrary code via a regular expression containing more than 9 captures.
An attacker may cause a denial of service or execute arbitrary code with the privileges of the user that is running apache.
There is no known workaround at this time, other than to disable both mod_alias and mod_rewrite.
It is recommended that all Gentoo Linux users who are running net-misc/apache 1.x upgrade:
# emerge sync # emerge -pv apache # emerge '>=www-servers/apache-1.3.29' # emerge clean # /etc/init.d/apache restart