Apache 'mod_ssl' 'ssl_util_uuencode_binary()' Stack Buffer Overflow Vulnerability

Apache 'mod_ssl' 'ssl_util_uuencode_binary()' Stack Buffer Overflow Vulnerability

Solution:
Fixes are available. Please see the references for more information.

OpenBSD OpenBSD 3.5

OpenBSD 013_httpd.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/013_httpd.patch

OpenBSD OpenBSD 3.4

OpenBSD 025_httpd3.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/025_httpd3.patch

HP HP-UX B.11.11

HP HP-UX Apache-based Web Server v.2.0.50.00
http://software.hp.com

HP HP-UX B.11.22

HP HP-UX Apache-based Web Server v.2.0.50.00
http://software.hp.com

Apache Software Foundation Apache 1.3.26

Slackware apache-1.3.31-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/a pache-1.3.31-i386-1.tgz

Apache Software Foundation Apache 1.3.27

Slackware apache-1.3.31-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/a pache-1.3.31-i386-1.tgz

Apache Software Foundation Apache 1.3.28

OpenPKG apache-1.3.28-1.3.4.src.rpm
For OpenPKG 1.3
ftp://ftp.openpkg.org/release/1.3/UPD/apache-1.3.28-1.3.4.src.rpm

Slackware apache-1.3.31-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/a pache-1.3.31-i486-1.tgz

Apache Software Foundation Apache 1.3.29

OpenPKG apache-1.3.29-2.0.2.src.rpm
For OpenPKG 2.0
ftp://ftp.openpkg.org/release/2.0/UPD/apache-1.3.29-2.0.2.src.rpm

Apache Software Foundation Apache 1.3.31

Trustix apache-1.3.31-2tr.i586.rpm
Secure Linux 1.5
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-devel-1.3.31-2tr.i586.rpm
Secure Linux 1.5
ftp://ftp.trustix.org/pub/trustix/updates/

Apple Mac OS X Server 10.3.4

Apple SecUpdSrvr2004-09-07PanL.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04713&plat form=osx&method=sa/SecUpdSrvr2004-09-07PanL.dmg

Apple Mac OS X Server 10.3.5

Apple SecUpdSrvr2004-09-07PanM.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04714&plat form=osx&method=sa/SecUpdSrvr2004-09-07PanM.dmg

Apple Mac OS X 10.3.5

Apple SecUpd2004-09-07PanMClient.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04715&plat form=osx&method=sa/SecUpd2004-09-07PanMClient.dmg

Apache Software Foundation Apache 2.0

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.28 Beta

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.32

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.35

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.36

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.37

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.38

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.39

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.40

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.41

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.43

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.45

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.46

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Apache Software Foundation Apache 2.0.48

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Fedora httpd-2.0.50-1.0.x86_64.rpm
RedHat Fedora Core 1
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora httpd-debuginfo-2.0.50-1.0.x86_64.rpm
RedHat Fedora Core 1
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora httpd-devel-2.0.50-1.0.x86_64.rpm
RedHat Fedora Core 1
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora httpd-manual-2.0.50-1.0.x86_64.rpm
RedHat Fedora Core 1
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Fedora mod_ssl-2.0.50-1.0.x86_64.rpm
RedHat Fedora Core 1
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

Mandrake apache2-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-common-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-common-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-devel-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-devel-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-manual-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-manual-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_cache-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_cache-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_dav-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_dav-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_deflate-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_deflate-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_disk_cache-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_disk_cache-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_file_cache-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_file_cache-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_ldap-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_ldap-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_mem_cache-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_mem_cache-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_proxy-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_proxy-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_ssl-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-mod_ssl-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-modules-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-modules-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-source-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake apache2-source-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64apr0-2.0.48-6.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake libapr0-2.0.48-6.2.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

Trustix apache-dbm-2.0.49-2tr.i586.rpm
ftp://ftp.trustix.org/pub/trustix/updates/2.1/rpms/apache-dbm-2.0.49-2 tr.i586.rpm

TurboLinux httpd-2.0.48-15.i586.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/httpd-2.0.48-15.i586.rpm

Apache Software Foundation Apache 2.0.49

Apache Software Foundation httpd-2.0.50.tar.gz
http://www.tux.org/pub/net/apache/dist/httpd/httpd-2.0.50.tar.gz

Fedora httpd-2.0.50-2.1.i386.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-2.0.50-2.1.x86_64.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-debuginfo-2.0.50-2.1.i386.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-debuginfo-2.0.50-2.1.x86_64.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-devel-2.0.50-2.1.i386.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-devel-2.0.50-2.1.x86_64.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-manual-2.0.50-2.1.i386.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora httpd-manual-2.0.50-2.1.x86_64.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora mod_ssl-2.0.50-2.1.i386.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Fedora mod_ssl-2.0.50-2.1.x86_64.rpm
RedHat Fedora Core 2
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

Trustix apache-2.0.49-2tr.i586.rpm
Secure Linux 2.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-2.0.49-7tr.i586.rpm
Secure Linux 2.1 & Secure Enterprise Linux 2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-dbm-2.0.49-7tr.i586.rpm
Secure Linux 2.1 & Secure Enterprise Linux 2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-devel-2.0.49-2tr.i586.rpm
Secure Linux 2.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-devel-2.0.49-7tr.i586.rpm
Secure Linux 2.1 & Secure Enterprise Linux 2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-manual-2.0.49-2tr.i586.rpm
Secure Linux 2.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix apache-manual-2.0.49-7tr.i586.rpm
Secure Linux 2.1 & Secure Enterprise Linux 2
ftp://ftp.trustix.org/pub/trustix/updates/

mod_ssl mod_ssl 2.8.10

Mandrake mod_ssl-2.8.10-5.3.C21mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake mod_ssl-2.8.10-5.3.C21mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php

mod_ssl mod_ssl 2.8.12

Mandrake mod_ssl-2.8.12-8.1.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake mod_ssl-2.8.12-8.1.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php

RedHat mod_ssl-2.8.12-6.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mod_ssl-2.8.1 2-6.legacy.i386.rpm

Slackware mod_ssl-2.8.18_1.3.31-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/m od_ssl-2.8.18_1.3.31-i386-1.tgz

mod_ssl mod_ssl 2.8.15

Mandrake mod_ssl-2.8.15-1.1.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mod_ssl-2.8.15-1.1.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php

Slackware mod_ssl-2.8.18_1.3.31-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/m od_ssl-2.8.18_1.3.31-i486-1.tgz

mod_ssl mod_ssl 2.8.16

Mandrake mod_ssl-2.8.16-1.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mod_ssl-2.8.16-1.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php

mod_ssl mod_ssl 2.8.7

Mandrake mod_ssl-2.8.7-3.3.M82mdk.i586.rpm
Mandrake Multi Network Firewall 8.2
http://www.mandrakesecure.net/en/ftp.php

mod_ssl mod_ssl 2.8.9

Debian libapache-mod-ssl-doc_2.8.9-2.3_all.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl-doc_2.8.9-2.3_all.deb

Debian libapache-mod-ssl_2.8.9-2.3_arm.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_arm.deb

Debian libapache-mod-ssl_2.8.9-2.3_hppa.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_hppa.deb

Debian libapache-mod-ssl_2.8.9-2.3_i386.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_i386.deb

Debian libapache-mod-ssl_2.8.9-2.3_ia64.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_ia64.deb

Debian libapache-mod-ssl_2.8.9-2.3_m68k.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_m68k.deb

Debian libapache-mod-ssl_2.8.9-2.3_mips.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_mips.deb

Debian libapache-mod-ssl_2.8.9-2.3_mipsel.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_mipsel.deb

Debian libapache-mod-ssl_2.8.9-2.3_powerpc.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_powerpc.deb

Debian libapache-mod-ssl_2.8.9-2.3_s390.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_s390.deb

Debian libapache-mod-ssl_2.8.9-2.3_sparc.deb
Debian GNU/Linux 3.0 (woody)
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl_2. 8.9-2.3_sparc.deb

Debian libapache-mod-ssl_2.8.9-2.4_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_arm.deb

Debian libapache-mod-ssl_2.8.9-2.4_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_hppa.deb

Debian libapache-mod-ssl_2.8.9-2.4_i386.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_i386.deb

Debian libapache-mod-ssl_2.8.9-2.4_ia64.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_ia64.deb

Debian libapache-mod-ssl_2.8.9-2.4_m68k.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_m68k.deb

Debian libapache-mod-ssl_2.8.9-2.4_mips.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_mips.deb

Debian libapache-mod-ssl_2.8.9-2.4_mipsel.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_mipsel.deb

Debian libapache-mod-ssl_2.8.9-2.4_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_powerpc.deb

Debian libapache-mod-ssl_2.8.9-2.4_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_s390.deb

Debian libapache-mod-ssl_2.8.9-2.4_sparc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/liba/libapache-mod-ssl/li bapache-mod-ssl_2.8.9-2.4_sparc.deb

Slackware mod_ssl-2.8.18_1.3.31-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/m od_ssl-2.8.18_1.3.31-i386-1.tgz