• info
• discussion
• exploit
• solution
• references

Apache /tmp File Race Vulnerability

Solution:
Upgrades available:


Apache Software Foundation Apache 1.3.9

• Debian apache-common_1.3.9-14.3_alpha.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_alpha.deb


• Debian apache-common_1.3.9-14.3_arm.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_arm.deb


• Debian apache-common_1.3.9-14.3_i386.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_i386.deb


• Debian apache-common_1.3.9-14.3_m68k.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_m68k.deb


• Debian apache-common_1.3.9-14.3_powerpc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_powerpc.deb


• Debian apache-common_1.3.9-14.3_sparc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-common_1. 3.9-14.3_sparc.deb


• Debian apache-dev_1.3.9-14.3_alpha.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_alpha.deb


• Debian apache-dev_1.3.9-14.3_arm.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_arm.deb


• Debian apache-dev_1.3.9-14.3_i386.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_i386.deb


• Debian apache-dev_1.3.9-14.3_m68k.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_m68k.deb


• Debian apache-dev_1.3.9-14.3_powerpc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_powerpc.deb


• Debian apache-dev_1.3.9-14.3_sparc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.9 -14.3_sparc.deb


• Debian apache-doc_1.3.9-14.3_all.deb
  http://security.debian.org/pool/updates/main/a/apache/apache-doc_1.3.9 -14.3_all.deb


• Debian apache-ssl_1.3.9.13-4.2_alpha.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_alpha.deb


• Debian apache-ssl_1.3.9.13-4.2_arm.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_arm.deb


• Debian apache-ssl_1.3.9.13-4.2_i386.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_i386.deb


• Debian apache-ssl_1.3.9.13-4.2_m68k.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_m68k.deb


• Debian apache-ssl_1.3.9.13-4.2_powerpc.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_powerpc.deb


• Debian apache-ssl_1.3.9.13-4.2_sparc.deb
  http://security.debian.org/pool/updates/main/a/apache-ssl/apache-ssl_1 .3.9.13-4.2_sparc.deb


• Debian apache_1.3.9-14.3_alpha.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_alpha.deb


• Debian apache_1.3.9-14.3_arm.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_arm.deb


• Debian apache_1.3.9-14.3_i386.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_i386.deb


• Debian apache_1.3.9-14.3_m68k.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_m68k.deb


• Debian apache_1.3.9-14.3_powerpc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_powerpc.deb


• Debian apache_1.3.9-14.3_sparc.deb
  http://security.debian.org/pool/updates/main/a/apache/apache_1.3.9-14. 3_sparc.deb

Wirex Immunix OS 7.0 -Beta

• Wirex 7.0 i386 apache-1.3.14-3_StackGuard_5.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/apache-1.3.14-3 _StackGuard_5.i386.rpm


• Wirex 7.0 i386 apache-devel-1.3.14-3_StackGuard_5.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/apache-devel-1. 3.14-3_StackGuard_5.i386.rpm


• Wirex 7.0 i386 apache-manual-1.3.14-3_StackGuard_5.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/apache-manual-1 .3.14-3_StackGuard_5.i386.rpm


• Wirex 7.0 i386 mod_ssl-2.7.1-3_StackGuard_5.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/mod_ssl-2.7.1-3 _StackGuard_5.i386.rpm