|
Apache Mod_Access Access Control Rule Bypass Vulnerability
Solution: The vendor has addressed this issue, the fix is available through CVS at the following location: http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_access.c?r1=1.46&r2=1.47 OpenPKG has released an advisory OpenPKG-SA-2004.021 to address this and other issues in Apache. Please see the referenced advisory for more information. Slackware has released an advisory SSA:2004-133-01 to address this and other issues in Apache. Please see the referenced advisory for more information. Trustix has released an advisory TSLSA-2004-0027 to address this and other issues in Apache. Please see the referenced advisory for more information. Mandrake has issused advisory MDKSA-2004:046 and fixes. See reference section for more information. Mandrake has issued a revised advisory and fixes. See advisory MDKSA-2004:046-1 in the reference section for more information. Turbolinux has issused advisory TLSA-2004-17 and fixes. See reference section for more information. Apache Server version 1.3.31 has been released to address this and other issues. HP has released an advisory (HPSBUX01069) to address this and other issues. Please see the referenced advisory for more information. Sun has released an alert (Alert ID: 57628) containing preliminary T-patches to address this and other issues in Apache. Please see the advisory in web references for more information. Sun has released an update to Sun Alert ID: 57628. Patches for Solaris 9.0 have been made available. Patches for Solaris 8.0 are still pending. Sun has released an update to Sun Alert ID: 57628. T-Patches (T116973-01, T116974-01) are available through normal support channels for Solaris 8 SPARC platform and Solaris 8 x86 platform. Please see the referenced Sun alert for more information. Oracle has released a Critical Patch Update (Critical Patch Update - July 2005) to address this issue. Currently, it is unknown which exact Oracle products include vulnerable packages. Information regarding obtaining and applying an appropriate patch can be found in the Oracle Critical Patch Update in references. Sun Solaris 9
Sun Solaris 9_x86
Apache Software Foundation Apache 1.3
Apache Software Foundation Apache 1.3.1
Apache Software Foundation Apache 1.3.11
Apache Software Foundation Apache 1.3.12
Apache Software Foundation Apache 1.3.14
Apache Software Foundation Apache 1.3.17
Apache Software Foundation Apache 1.3.18
Apache Software Foundation Apache 1.3.19
Apache Software Foundation Apache 1.3.20
Apache Software Foundation Apache 1.3.22
Apache Software Foundation Apache 1.3.23
Apache Software Foundation Apache 1.3.24
Apache Software Foundation Apache 1.3.25
Apache Software Foundation Apache 1.3.26
Apache Software Foundation Apache 1.3.27
Apache Software Foundation Apache 1.3.28
Apache Software Foundation Apache 1.3.29
Apache Software Foundation Apache 1.3.3
Apache Software Foundation Apache 1.3.4
Apache Software Foundation Apache 1.3.6
Apache Software Foundation Apache 1.3.7 -dev
Apache Software Foundation Apache 1.3.9
|
|
|
Privacy Statement |
