Apache Web Server Type-Map Recursive Loop Denial Of Service Vulnerability

Apache Web Server Type-Map Recursive Loop Denial Of Service Vulnerability

Solution:
The vendor has addressed this issue with the release of Apache 2.0.47.

Conectiva has released advisory CLA-2003:704 to address this issue. Further information regarding obtaining and applying fixes can be found in the referenced advisory.

Mandrake has released advisory MDKSA-2003:075 to address this issue. See referenced advisory for additional details and fix information.

Conectiva has released advisory CLA-2003:698 to address this issue. Further information regarding obtaining and applying fixes can be found in the referenced advisory.

HP has released advisory HPSBUX0310-285 to address this issue.

Apache Software Foundation Apache 1.3.27

HP PHSS_29541
11.04 Virtualvault 4.5 IWS Update
http://itrc.hp.com

HP PHSS_29542
11.04 Virtualvault 4.6 IWS update
http://itrc.hp.com

HP PHSS_29545
11.04 Virtualvault 4.5 OWS update
http://itrc.hp.com

HP PHSS_29546
11.04 Virtualvault 4.6 OWS update
http://itrc.hp.com

HP PHSS_29547
11.04 Webproxy server 2.0 update
http://itrc.hp.com

Apache Software Foundation Apache 2.0.43

Apache Software Foundation Apache httpd 2.0.47
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.44

Apache Software Foundation Apache httpd 2.0.47
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.45

Apache Software Foundation Apache httpd 2.0.47
http://httpd.apache.org/download.cgi

Conectiva apache-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-2.0.45-28790U90_3cl. i386.rpm

Conectiva apache-2.0.45-28790U90_3cl.src.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/SRPMS/apache-2.0.45-28790U90_3cl .src.rpm

Conectiva apache-devel-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-devel-2.0.45-28790U9 0_3cl.i386.rpm

Conectiva apache-doc-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-doc-2.0.45-28790U90_ 3cl.i386.rpm

Conectiva apache-htpasswd-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-htpasswd-2.0.45-2879 0U90_3cl.i386.rpm

Conectiva libapr-devel-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr-devel-2.0.45-28790U9 0_3cl.i386.rpm

Conectiva libapr-devel-static-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr-devel-static-2.0.45- 28790U90_3cl.i386.rpm

Conectiva libapr0-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr0-2.0.45-28790U90_3cl .i386.rpm

Conectiva mod_auth_ldap-2.0.45-28790U90_3cl.i386.rpm
Conectiva Linux 9
ftp://atualizacoes.conectiva.com.br/9/RPMS/mod_auth_ldap-2.0.45-28790U 90_3cl.i386.rpm

Apache Software Foundation Apache 2.0.46

Apache Software Foundation Apache httpd 2.0.47
http://httpd.apache.org/download.cgi