• info
• discussion
• exploit
• solution
• references

Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Slackware Linux 12.2

• Slackware httpd-2.2.16-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ httpd-2.2.16-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu apache2-doc_2.2.14-5ubuntu8.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 14-5ubuntu8.4_all.deb


• Ubuntu apache2-mpm-event_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-event_2.2.14-5 ubuntu8.4_powerpc.deb


• Ubuntu apache2-mpm-itk_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/a/apache2/apache2-mpm-itk_2.2.14 -5ubuntu8.4_powerpc.deb


• Ubuntu apache2-mpm-prefork_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-prefork_2.2.14 -5ubuntu8.4_powerpc.deb


• Ubuntu apache2-mpm-worker_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-worker_2.2.14- 5ubuntu8.4_powerpc.deb


• Ubuntu apache2-prefork-dev_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-prefork-dev_2.2.14 -5ubuntu8.4_powerpc.deb


• Ubuntu apache2-suexec-custom_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec-custom_ 2.2.14-5ubuntu8.4_powerpc.deb


• Ubuntu apache2-suexec_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec_2.2.14- 5ubuntu8.4_powerpc.deb


• Ubuntu apache2-threaded-dev_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-threaded-dev_2.2.1 4-5ubuntu8.4_powerpc.deb


• Ubuntu apache2-utils_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-utils_2.2.14-5ubun tu8.4_powerpc.deb


• Ubuntu apache2.2-bin_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2.2-bin_2.2.14-5ubun tu8.4_powerpc.deb


• Ubuntu apache2.2-common_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2.2-common_2.2.14-5u buntu8.4_powerpc.deb


• Ubuntu apache2_2.2.14-5ubuntu8.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2_2.2.14-5ubuntu8.4_ powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu apache2-doc_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-event_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-even t_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-itk_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-mpm- itk_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-prefork_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-pref ork_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-worker_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-work er_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-prefork-dev_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-prefork- dev_2.2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2-suexec-custom_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-suex ec-custom_2.2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2-suexec_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-suex ec_2.2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2-threaded-dev_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-threaded -dev_2.2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2-utils_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-utils_2. 2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2.2-bin_2.2.12-1ubuntu2.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-bin_2. 2.12-1ubuntu2.4_amd64.deb


• Ubuntu apache2.2-common_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-common _2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2_2.2.12-1 ubuntu2.4_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu apache2-doc_2.2.8-1ubuntu0.19_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 8-1ubuntu0.19_all.deb


• Ubuntu apache2-mpm-event_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-even t_2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2-mpm-perchild_2.2.8-1ubuntu0.19_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-perc hild_2.2.8-1ubuntu0.19_all.deb


• Ubuntu apache2-mpm-prefork_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-pref ork_2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2-mpm-worker_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-work er_2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2-prefork-dev_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-prefork- dev_2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2-src_2.2.8-1ubuntu0.19_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-src_2.2. 8-1ubuntu0.19_all.deb


• Ubuntu apache2-threaded-dev_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-threaded -dev_2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2-utils_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-utils_2. 2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2.2-common_2.2.8-1ubuntu0.19_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-common _2.2.8-1ubuntu0.19_i386.deb


• Ubuntu apache2_2.2.8-1ubuntu0.19_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2_2.2.8-1u buntu0.19_all.deb

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu apache2-doc_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-event_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-even t_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-itk_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-mpm- itk_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-prefork_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-pref ork_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-mpm-worker_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-work er_2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2-prefork-dev_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-prefork-dev_2.2.12 -1ubuntu2.4_sparc.deb


• Ubuntu apache2-suexec-custom_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec-custom_ 2.2.12-1ubuntu2.4_sparc.deb


• Ubuntu apache2-suexec_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec_2.2.12- 1ubuntu2.4_sparc.deb


• Ubuntu apache2-threaded-dev_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-threaded-dev_2.2.1 2-1ubuntu2.4_sparc.deb


• Ubuntu apache2-utils_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2-utils_2.2.12-1ubun tu2.4_sparc.deb


• Ubuntu apache2.2-bin_2.2.12-1ubuntu2.4_sparc.deb
  http://ports.ubuntu.com/pool/main/a/apache2/apache2.2-bin_2.2.12-1ubun tu2.4_sparc.deb


• Ubuntu apache2.2-common_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-common _2.2.12-1ubuntu2.4_all.deb


• Ubuntu apache2_2.2.12-1ubuntu2.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2_2.2.12-1 ubuntu2.4_all.deb

Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.5

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.6

• Apple MacOSXServerUpd10.6.7.dmg
  For Mac OS X Server v10.6.6
  http://www.apple.com/support/downloads/