Alerts This Week
Warning Icon 1 872
Alerts This Week
Warning Icon 1 872

Gentoo Linux: 200305-13 Moderate: Apache 2.x Denial Of Service Threat

gentoo
Calendar Grey June 2, 2003
Dist Gentoo Esm H88
Severe denial of service threat identified in Apache 2.x on Gentoo; users should upgrade for safety.
Apache 2.0 versions 2.0.37 through 2.0.45 can be caused to crash in certain circumstances.

Summary


GENTOO LINUX SECURITY ANNOUNCEMENT 200305-13


- From announcement:

"Apache 2.0 versions 2.0.37 through 2.0.45 can be caused to crash in 
certain circumstances.  This can be triggered remotely through mod_dav 
and possibly other mechanisms.  The crash was originally reported by 
David Endler <DEndler@iDefense.com> and was researched and fixed by 
Joe Orton <jorton@RedHat.com>.  Specific details and an analysis of the 
crash will be published Friday, May 30.  No more specific information 
is disclosed at this time, but all Apache 2.0 users are encouraged to 
upgrade now."

...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service update apache gentoo linux

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

PACKAGE : apache-2.x
SUMMARY : denial of service
DATE : 2003-06-01 12:01 UTC
EXPLOIT : remote
VERSIONS AFFECTED : =apache-2.0.46
CVE : CAN-2003-0245 CAN-2003-0189

Topics%20covered

Topics Covered

security advisory denial of service update apache gentoo linux

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here