int(995)

Boletines de Vulnerabilidades


Denegación de servicio en Apache

Clasificación de la vulnerabilidad

Propiedad Valor
Nivel de Confianza Oficial
Impacto Denegación de Servicio
Dificultad Avanzado
Requerimientos del atacante Acceso remoto con cuenta

Información sobre el sistema

Propiedad Valor
Fabricante afectado GNU/Linux
Software afectado Apache <= 2.0.50

Descripción

Se han descubierto dos vulnerabilidades en el módulo mod_ssl de Apache (versión 2.0.50 y anteriores). Las vulnerabilidades residen en el filtro de entrada.

Un atacante remoto podría provocar, mediante las mencionadas vulnerabilidades, que una conexión SSL se abortase de tal forma que un proceso hijo entrase en un loop infinito, consumiendo los recursos de CPU.

Solución



Actualización de software

Apache
Apache httpd 2.0.51
http://httpd.apache.org/

Red Hat Linux

Red Hat Desktop (v. 3) - AMD64
httpd-2.0.46-38.ent.x86_64.rpm
httpd-devel-2.0.46-38.ent.x86_64.rpm
mod_ssl-2.0.46-38.ent.x86_64.rpm

Red Hat Desktop (v. 3) - SRPMS
httpd-2.0.46-38.ent.src.rpm

Red Hat Desktop (v. 3) - i386
httpd-2.0.46-38.ent.i386.rpm
httpd-devel-2.0.46-38.ent.i386.rpm
mod_ssl-2.0.46-38.ent.i386.rpm

Red Hat Enterprise Linux AS (v. 3) - AMD64
httpd-2.0.46-38.ent.x86_64.rpm
httpd-devel-2.0.46-38.ent.x86_64.rpm
mod_ssl-2.0.46-38.ent.x86_64.rpm

Red Hat Enterprise Linux AS (v. 3) - SRPMS
httpd-2.0.46-38.ent.src.rpm

Red Hat Enterprise Linux AS (v. 3) - i386
httpd-2.0.46-38.ent.i386.rpm
httpd-devel-2.0.46-38.ent.i386.rpm
mod_ssl-2.0.46-38.ent.i386.rpm

Red Hat Enterprise Linux AS (v. 3) - ia64
httpd-2.0.46-38.ent.ia64.rpm
httpd-devel-2.0.46-38.ent.ia64.rpm
mod_ssl-2.0.46-38.ent.ia64.rpm

Red Hat Enterprise Linux AS (v. 3) - ppc
httpd-2.0.46-38.ent.ppc.rpm
httpd-devel-2.0.46-38.ent.ppc.rpm
mod_ssl-2.0.46-38.ent.ppc.rpm

Red Hat Enterprise Linux AS (v. 3) - s390
httpd-2.0.46-38.ent.s390.rpm
httpd-devel-2.0.46-38.ent.s390.rpm
mod_ssl-2.0.46-38.ent.s390.rpm

Red Hat Enterprise Linux AS (v. 3) - s390x
httpd-2.0.46-38.ent.s390x.rpm
httpd-devel-2.0.46-38.ent.s390x.rpm
mod_ssl-2.0.46-38.ent.s390x.rpm

Red Hat Enterprise Linux ES (v. 3) - AMD64
httpd-2.0.46-38.ent.x86_64.rpm
httpd-devel-2.0.46-38.ent.x86_64.rpm
mod_ssl-2.0.46-38.ent.x86_64.rpm

Red Hat Enterprise Linux ES (v. 3) - SRPMS
httpd-2.0.46-38.ent.src.rpm

Red Hat Enterprise Linux ES (v. 3) - i386
httpd-2.0.46-38.ent.i386.rpm
httpd-devel-2.0.46-38.ent.i386.rpm
mod_ssl-2.0.46-38.ent.i386.rpm

Red Hat Enterprise Linux ES (v. 3) - ia64
httpd-2.0.46-38.ent.ia64.rpm
httpd-devel-2.0.46-38.ent.ia64.rpm
mod_ssl-2.0.46-38.ent.ia64.rpm

Red Hat Enterprise Linux WS (v. 3) - AMD64
httpd-2.0.46-38.ent.x86_64.rpm
httpd-devel-2.0.46-38.ent.x86_64.rpm
mod_ssl-2.0.46-38.ent.x86_64.rpm

Red Hat Enterprise Linux WS (v. 3) - SRPMS
httpd-2.0.46-38.ent.src.rpm

Red Hat Enterprise Linux WS (v. 3) - i386
httpd-2.0.46-38.ent.i386.rpm
httpd-devel-2.0.46-38.ent.i386.rpm
mod_ssl-2.0.46-38.ent.i386.rpm

Red Hat Enterprise Linux WS (v. 3) - ia64
httpd-2.0.46-38.ent.ia64.rpm
httpd-devel-2.0.46-38.ent.ia64.rpm
mod_ssl-2.0.46-38.ent.ia64.rpm

Red Hat Desktop (v. 3)
AMD64
httpd-2.0.46-40.ent.x86_64.rpm
httpd-devel-2.0.46-40.ent.x86_64.rpm
mod_ssl-2.0.46-40.ent.x86_64.rpm
SRPMS
httpd-2.0.46-40.ent.src.rpm
i386
httpd-2.0.46-40.ent.i386.rpm
httpd-devel-2.0.46-40.ent.i386.rpm
mod_ssl-2.0.46-40.ent.i386.rpm
https://rhn.redhat.com/

Red Hat Enterprise Linux AS (v. 3)
AMD64:
httpd-2.0.46-40.ent.x86_64.rpm
httpd-devel-2.0.46-40.ent.x86_64.rpm
mod_ssl-2.0.46-40.ent.x86_64.rpm
SRPMS
httpd-2.0.46-40.ent.src.rpm
i386
httpd-2.0.46-40.ent.i386.rpm
httpd-devel-2.0.46-40.ent.i386.rpm
mod_ssl-2.0.46-40.ent.i386.rpm
ia64
httpd-2.0.46-40.ent.ia64.rpm
httpd-devel-2.0.46-40.ent.ia64.rpm
mod_ssl-2.0.46-40.ent.ia64.rpm
ppc
httpd-2.0.46-40.ent.ppc.rpm
httpd-devel-2.0.46-40.ent.ppc.rpm
mod_ssl-2.0.46-40.ent.ppc.rpm
s390
httpd-2.0.46-40.ent.s390.rpm
httpd-devel-2.0.46-40.ent.s390.rpm
mod_ssl-2.0.46-40.ent.s390.rpm
s390x
httpd-2.0.46-40.ent.s390x.rpm
httpd-devel-2.0.46-40.ent.s390x.rpm
mod_ssl-2.0.46-40.ent.s390x.rpm
https://rhn.redhat.com/

Red Hat Enterprise Linux ES (v. 3)
AMD64
httpd-2.0.46-40.ent.x86_64.rpm
httpd-devel-2.0.46-40.ent.x86_64.rpm
mod_ssl-2.0.46-40.ent.x86_64.rpm
SRPMS
httpd-2.0.46-40.ent.src.rpm
i386
httpd-2.0.46-40.ent.i386.rpm
httpd-devel-2.0.46-40.ent.i386.rpm
mod_ssl-2.0.46-40.ent.i386.rpm
ia64
httpd-2.0.46-40.ent.ia64.rpm
httpd-devel-2.0.46-40.ent.ia64.rpm
mod_ssl-2.0.46-40.ent.ia64.rpm
https://rhn.redhat.com/

Red Hat Enterprise Linux WS (v. 3)
AMD64
httpd-2.0.46-40.ent.x86_64.rpm
httpd-devel-2.0.46-40.ent.x86_64.rpm
mod_ssl-2.0.46-40.ent.x86_64.rpm
SRPMS
httpd-2.0.46-40.ent.src.rpm
i386
httpd-2.0.46-40.ent.i386.rpm
httpd-devel-2.0.46-40.ent.i386.rpm
mod_ssl-2.0.46-40.ent.i386.rpm
ia64
httpd-2.0.46-40.ent.ia64.rpm
httpd-devel-2.0.46-40.ent.ia64.rpm
mod_ssl-2.0.46-40.ent.ia64.rpm
https://rhn.redhat.com/

SuSE Linux

SUSE Linux 9.1
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-2.0.49-27.11.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-prefork-2.0.49-27.11.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-worker-2.0.49-27.11.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/libapr0-2.0.49-27.11.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-2.0.49-27.11.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-prefork-2.0.49-27.11.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-worker-2.0.49-27.11.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/libapr0-2.0.49-27.11.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/apache2-2.0.49-27.11.src.rpm
x86-64
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-2.0.49-27.11.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-prefork-2.0.49-27.11.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-worker-2.0.49-27.11.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/libapr0-2.0.49-27.11.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-2.0.49-27.11.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-prefork-2.0.49-27.11.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-worker-2.0.49-27.11.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/libapr0-2.0.49-27.11.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/apache2-2.0.49-27.11.src.rpm

SUSE Linux 9.0
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-prefork-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-worker-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/libapr0-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-prefork-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-worker-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/libapr0-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/apache2-2.0.48-135.src.rpm
x86-64
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-2.0.48-135.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-prefork-2.0.48-135.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-worker-2.0.48-135.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/libapr0-2.0.48-135.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-2.0.48-135.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-prefork-2.0.48-135.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-worker-2.0.48-135.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/libapr0-2.0.48-135.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/apache2-2.0.48-135.src.rpm

SUSE Linux 8.2
x86
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-prefork-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-worker-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/libapr0-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-prefork-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-worker-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/libapr0-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/apache2-2.0.48-135.src.rpm

SUSE Linux 8.1
x86
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-prefork-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-worker-2.0.48-135.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-prefork-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/apache2-worker-2.0.48-135.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/apache2-2.0.48-135.src.rpm

Mandrake Linux

Mandrakelinux 9.2
x86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-common-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-devel-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-manual-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_cache-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_dav-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_deflate-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_disk_cache-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_file_cache-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_ldap-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_mem_cache-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_proxy-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-mod_ssl-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-modules-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/apache2-source-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/libapr0-2.0.47-6.9.92mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/SRPMS/apache2-2.0.47-6.9.92mdk.src.rpm
AMD64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-common-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-devel-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-manual-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_cache-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_dav-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_deflate-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_disk_cache-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_file_cache-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_ldap-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_mem_cache-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_proxy-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-mod_ssl-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-modules-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/apache2-source-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/lib64apr0-2.0.47-6.9.92mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/SRPMS/apache2-2.0.47-6.9.92mdk.src.rpm

Mandrakelinux 10.0
x86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-common-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-devel-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-manual-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_cache-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_dav-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_deflate-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_disk_cache-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_file_cache-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_ldap-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_mem_cache-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_proxy-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-mod_ssl-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-modules-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/apache2-source-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/libapr0-2.0.48-6.6.100mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/SRPMS/apache2-2.0.48-6.6.100mdk.src.rpm
AMD64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-common-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-devel-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-manual-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_cache-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_dav-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_deflate-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_disk_cache-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_file_cache-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_ldap-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_mem_cache-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_proxy-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-mod_ssl-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-modules-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/apache2-source-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/lib64apr0-2.0.48-6.6.100mdk.amd64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/SRPMS/apache2-2.0.48-6.6.100mdk.src.rpm

HP

HP-UX B.11.00
IPv4 - Instalar hpuxwsAPACHE A.2.0.52.00
http://software.hp.com/

HP-UX B.11.11
IPv4 - Instalar hpuxwsAPACHE A.2.0.52.00
IPv6 - Instalar hpuxwsAPACHE B.2.0.52.00
http://software.hp.com/

HP-UX B.11.22
IPv4 - Actualizar a HP-UX B.11.23

HP-UX B.11.23
IPv6 - Instalar hpuxwsAPACHE B.2.0.52.00
http://software.hp.com/

Identificadores estándar

Propiedad Valor
CVE CAN-2004-0748
CAN-2004-0751
BID

Recursos adicionales

Overview of security vulnerabilities in Apache httpd 2.0
http://www.apacheweek.com/features/security-20

Red Hat security advisory RHSA-2004-349
https://rhn.redhat.com/errata/RHSA-2004-349.html

Red Hat Security Advisory RHSA-2004:463-09
https://rhn.redhat.com/errata/RHSA-2004-463.html

SUSE Security Announcement SUSE-SA:2004:030
http://www.suse.de/de/security/2004_30_apache2.html

Mandrakesoft Security Advisory MDKSA-2004:096
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:096

HP SECURITY BULLETIN HPSBUX01090
http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01090

Histórico de versiones

Versión Comentario Fecha
1.0 Aviso emitido 2004-09-03
1.1 Aviso emitido por SuSE (SUSE-SA:2004:030) 2004-09-07
1.2 Vulnerabilidad solucionada en Apache httpd 2.0.51-dev 2004-09-15
1.3 Apache httpd 2.0.51 publicado. Aviso emitido por Red Hat (RHSA-2004:463-09). Aviso emitido por Mandrake (MDKSA-2004:096). 2004-09-16
1.4 Aviso emitido por HP (HPSBUX01090) 2004-10-28

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT