Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
BID:43673
Info
Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
| Bugtraq ID: | 43673 |
| Class: | Unknown |
| CVE: |
CVE-2010-1623 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2010 12:00AM |
| Updated: | Apr 13 2015 09:16PM |
| Credit: | Stefan Fritsch |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Redhat JBoss Enterprise Web Server for Windows 1.0 Redhat JBoss Enterprise Web Server for Solaris 1.0 Redhat JBoss Enterprise Web Server for RHEL 6 1.0 Redhat JBoss Enterprise Web Server for RHEL 5 Server 1.0 Redhat JBoss Enterprise Web Server for RHEL 4 ES 1.0 Redhat JBoss Enterprise Web Server for RHEL 4 AS 1.0 Redhat JBoss Enterprise Web Server EL4 0 Redhat JBoss Enterprise Web Server 5.0 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux ES 4.8.z Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4.8.z Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Desktop Workstation 5 Redhat Desktop 4.0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 IBM WebSphere Application Server for z/OS 6.1 IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 7.0 .9 IBM Websphere Application Server 7.0 .8 IBM Websphere Application Server 7.0 .2 IBM Websphere Application Server 7.0 .13 IBM Websphere Application Server 7.0 .12 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 7.0.0.7 IBM Websphere Application Server 7.0.0.6 IBM Websphere Application Server 7.0.0.5 IBM Websphere Application Server 7.0.0.4 IBM Websphere Application Server 7.0.0.13 IBM Websphere Application Server 7.0.0.1 IBM OS/400 V5R4M0 IBM i5/OS 0 HP System Management Homepage 6.2.2 7 HP System Management Homepage 6.0 .96 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.0-68 HP System Management Homepage 0 HP HP-UX Web Server Suite 3.13 HP HP-UX Web Server Suite 3.12 HP HP-UX Web Server Suite 3.10 HP HP-UX Web Server Suite 2.32 HP HP-UX Web Server Suite 2.31 HP HP-UX B.11.31 HP HP-UX B.11.11 Hitachi uCosminexus Service Platform 0 Hitachi uCosminexus Service Architect 0 Hitachi Hitachi Web Server 04-10-03 Windows Hitachi Hitachi Web Server 04-10-02 HP-UX (IPF) Hitachi Hitachi Web Server 04-10-01 HP-UX (IPF) Hitachi Hitachi Web Server 04-10 Windows Hitachi Hitachi Web Server 04-00-05 Windows Hitachi Hitachi Web Server 04-00-04 HP-UX (IPF) Hitachi Hitachi Web Server 04-00-01 Solaris Hitachi Hitachi Web Server 04-00 Windows Hitachi Hitachi Web Server 04-00 Linux (IPF) Hitachi Hitachi Web Server 04-00 Linux Hitachi Hitachi Web Server 04-00 HP-UX (IPF) Hitachi Hitachi Web Server 04-00 AIX Hitachi Hitachi Web Server 03-10-10 Windows Hitachi Hitachi Web Server 03-10-09 HP-UX (IPF) Hitachi Hitachi Web Server 03-10 Windows Hitachi Hitachi Web Server 03-00-05 HP-UX (IPF) Hitachi Hitachi Web Server 03-00-02 (Windows) Hitachi Hitachi Web Server 03-00-01 HP-UX Hitachi Hitachi Web Server 03-00-01 (HP-UX(IPF) Hitachi Hitachi Web Server 03-00 Windows Hitachi Hitachi Web Server 03-00 Solaris Hitachi Hitachi Web Server 03-00 Linux (IPF) Hitachi Hitachi Web Server 03-00 Linux Hitachi Hitachi Web Server 03-00 HP-UX (IPF) Hitachi Hitachi Web Server 03-00 HP-UX Hitachi Hitachi Web Server 03-00 AIX Hitachi Cosminexus Developer no version 0 Hitachi Cosminexus Application Server no version 0 Hitachi Cosminexus 9.0 Hitachi Cosminexus 8.0 Hitachi Cosminexus 7.0 Gentoo Linux Fujitsu INTERSTAGE Studio Enterprise Edition 9.2 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1 Fujitsu INTERSTAGE Studio Enterprise Edition 9.0 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.3.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.2 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 A Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1.0B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 A Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0B Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Blue Coat Systems Director 5.2.2 .5 Blue Coat Systems Director 4.2.2 .4 Blue Coat Systems Director 5.5 Blue Coat Systems Director 5.4 Blue Coat Systems Director 0 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Messaging Storage Server MSS 5.1 Avaya Messaging Storage Server MSS 4.1 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 SP2 Avaya Messaging Storage Server 5.1 SP1 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 SP1 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking 5.2.1 Avaya Message Networking MN 3.1 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 Avaya IP Office Application Server 6.1 Avaya Intuity AUDIX LX R1.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Intuity AUDIX LX 1.0 Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 4.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Session Manager 1.0 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Communication Manager 4.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 4.2.3 Avaya Aura Application Enablement Services 4.2.2 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 4.2 Avaya Aura Application Enablement Services 4.1 Avaya Aura Application Enablement Services 4.0 Apache APR-util 1.3.9 Apache APR-util 1.3.8 Apache APR-util 1.3.7 Apache APR-util 1.3.6 Apache APR-util 1.3.5 Apache APR-util 1.3.4 Apache Apache 2.2.15 Apache Apache 2.2.14 Apache Apache 2.2.13 Apache Apache 2.2.12 Apache Apache 2.2.11 Apache Apache 2.2.10 Apache Apache 2.2.9 Apache Apache 2.2.8 Apache Apache 2.2.6 Apache Apache 2.2.5 Apache Apache 2.2.4 Apache Apache 2.2.3 Apache Apache 2.2.2 Apache Apache 2.2 Apache Apache 2.2.7-dev Apache Apache 2.2.6-dev Apache Apache 2.2.5-dev Apache Apache 2.2.16 Apache Apache 2.2.15-dev Apache Apache 2.2.1 Apache Apache 2.2 |
| Not Vulnerable: |
Redhat JBoss Enterprise Web Server for Windows 1.0.2 Redhat JBoss Enterprise Web Server for Solaris 1.0.2 Redhat JBoss Enterprise Web Server for RHEL 6 1.0.2 Redhat JBoss Enterprise Web Server for RHEL 5 Server 1.0.2 Redhat JBoss Enterprise Web Server for RHEL 4 ES 1.0.2 Redhat JBoss Enterprise Web Server for RHEL 4 AS 1.0.2 IBM Websphere Application Server 7.0.0.15 IBM HTTP Server 6.1.0.35 HP System Management Homepage 7.0 HP HP-UX Web Server Suite 3.14 HP HP-UX Web Server Suite 2.33 Blue Coat Systems Director 5.5.2.3 Avaya Voice Portal 5.1 SP3 Avaya Messaging Storage Server 5.2 SP9 Avaya Message Networking 5.2 SP4 Avaya Meeting Exchange 6.2 Avaya IP Office Application Server 7.0 Avaya Aura SIP Enablement Services 5.2.1 SP2 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Communication Manager 6.2 Avaya Aura Communication Manager 5.2.1 SP4 Avaya Aura Application Enablement Services 6.1.1 Apache APR-util 1.3.10 Apache Apache 2.2.17 |
Discussion
Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
Apache 'APR-util' is prone to a vulnerability that may allow attackers to cause a denial-of-service condition.
Versions prior to 'APR-util' 1.3.10 are vulnerable.
Apache 'APR-util' is prone to a vulnerability that may allow attackers to cause a denial-of-service condition.
Versions prior to 'APR-util' 1.3.10 are vulnerable.
Exploit / POC
Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
Debian Linux 5.0 alpha
Ubuntu Ubuntu Linux 10.04 powerpc
Debian Linux 5.0 armel
Ubuntu Ubuntu Linux 9.10 amd64
Mandriva Linux Mandrake 2009.0 x86_64
MandrakeSoft Enterprise Server 5
Debian Linux 5.0 hppa
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
-
Slackware apr-1.3.12-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ apr-1.3.12-i486-1_slack12.2.tgz -
Slackware apr-util-1.3.10-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ apr-util-1.3.10-i486-1_slack12.2.tgz -
Slackware httpd-2.2.17-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ httpd-2.2.17-i486-1_slack12.2.tgz
Debian Linux 5.0 alpha
-
Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny5_alpha.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny5_alpha.deb -
Debian libaprutil1-dev_1.2.12+dfsg-8+lenny5_alpha.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny5_alpha.deb -
Debian libaprutil1_1.2.12+dfsg-8+lenny5_alpha.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny5_alpha.deb
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu apache2-doc_2.2.14-5ubuntu8.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 14-5ubuntu8.4_all.deb -
Ubuntu apache2-mpm-event_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-event_2.2.14-5 ubuntu8.4_powerpc.deb -
Ubuntu apache2-mpm-itk_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apache2/apache2-mpm-itk_2.2.14 -5ubuntu8.4_powerpc.deb -
Ubuntu apache2-mpm-prefork_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-prefork_2.2.14 -5ubuntu8.4_powerpc.deb -
Ubuntu apache2-mpm-worker_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-mpm-worker_2.2.14- 5ubuntu8.4_powerpc.deb -
Ubuntu apache2-prefork-dev_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-prefork-dev_2.2.14 -5ubuntu8.4_powerpc.deb -
Ubuntu apache2-suexec-custom_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec-custom_ 2.2.14-5ubuntu8.4_powerpc.deb -
Ubuntu apache2-suexec_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apache2/apache2-suexec_2.2.14- 5ubuntu8.4_powerpc.deb -
Ubuntu apache2-threaded-dev_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-threaded-dev_2.2.1 4-5ubuntu8.4_powerpc.deb -
Ubuntu apache2-utils_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2-utils_2.2.14-5ubun tu8.4_powerpc.deb -
Ubuntu apache2.2-bin_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2.2-bin_2.2.14-5ubun tu8.4_powerpc.deb -
Ubuntu apache2.2-common_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2.2-common_2.2.14-5u buntu8.4_powerpc.deb -
Ubuntu apache2_2.2.14-5ubuntu8.4_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apache2/apache2_2.2.14-5ubuntu8.4_ powerpc.deb -
Ubuntu libaprutil1-dbd-freetds_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apr-util/libaprutil1-dbd-freet ds_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dbd-mysql_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apr-util/libaprutil1-dbd-mysql _1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dbd-odbc_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apr-util/libaprutil1-dbd-odbc_ 1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dbd-pgsql_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/a/apr-util/libaprutil1-dbd-pgsql _1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dbd-sqlite3_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbd-sqlite3_1 .3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dbg_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dbg_1.3.9+dfs g-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-dev_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-dev_1.3.9+dfs g-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1-ldap_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1-ldap_1.3.9+df sg-3ubuntu0.10.04.1_powerpc.deb -
Ubuntu libaprutil1_1.3.9+dfsg-3ubuntu0.10.04.1_powerpc.deb
http://ports.ubuntu.com/pool/main/a/apr-util/libaprutil1_1.3.9+dfsg-3u buntu0.10.04.1_powerpc.deb
Debian Linux 5.0 armel
-
Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny5_armel.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny5_armel.deb -
Debian libaprutil1-dev_1.2.12+dfsg-8+lenny5_armel.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny5_armel.deb -
Debian libaprutil1_1.2.12+dfsg-8+lenny5_armel.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny5_armel.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu apache2-doc_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-doc_2.2. 12-1ubuntu2.4_all.deb -
Ubuntu apache2-mpm-event_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-even t_2.2.12-1ubuntu2.4_all.deb -
Ubuntu apache2-mpm-itk_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-mpm- itk_2.2.12-1ubuntu2.4_all.deb -
Ubuntu apache2-mpm-prefork_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-pref ork_2.2.12-1ubuntu2.4_all.deb -
Ubuntu apache2-mpm-worker_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-mpm-work er_2.2.12-1ubuntu2.4_all.deb -
Ubuntu apache2-prefork-dev_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-prefork- dev_2.2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2-suexec-custom_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-suex ec-custom_2.2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2-suexec_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apache2/apache2-suex ec_2.2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2-threaded-dev_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-threaded -dev_2.2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2-utils_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2-utils_2. 2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2.2-bin_2.2.12-1ubuntu2.4_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-bin_2. 2.12-1ubuntu2.4_amd64.deb -
Ubuntu apache2.2-common_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2.2-common _2.2.12-1ubuntu2.4_all.deb -
Ubuntu apache2_2.2.12-1ubuntu2.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apache2/apache2_2.2.12-1 ubuntu2.4_all.deb -
Ubuntu libaprutil1-dbd-freetds_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apr-util/libaprutil1 -dbd-freetds_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dbd-mysql_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apr-util/libaprutil1 -dbd-mysql_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dbd-odbc_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apr-util/libaprutil1 -dbd-odbc_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dbd-pgsql_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/a/apr-util/libaprutil1 -dbd-pgsql_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dbd-sqlite3_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-dbd -sqlite3_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dbg_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-dbg _1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-dev_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-dev _1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1-ldap_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1-lda p_1.3.9+dfsg-1ubuntu1.1_amd64.deb -
Ubuntu libaprutil1_1.3.9+dfsg-1ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/a/apr-util/libaprutil1_1.3 .9+dfsg-1ubuntu1.1_amd64.deb
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva apr-util-dbd-freetds-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-ldap-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-mysql-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-odbc-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-pgsql-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-sqlite3-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64apr-util-devel-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64apr-util1-1.3.4-2.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5
-
Mandriva apr-util-dbd-freetds-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-ldap-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-mysql-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-odbc-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-pgsql-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva apr-util-dbd-sqlite3-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libapr-util-devel-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libapr-util1-1.3.4-2.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/
Debian Linux 5.0 hppa
-
Debian libaprutil1-dbg_1.2.12+dfsg-8+lenny5_hppa.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-db g_1.2.12+dfsg-8+lenny5_hppa.deb -
Debian libaprutil1-dev_1.2.12+dfsg-8+lenny5_hppa.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1-de v_1.2.12+dfsg-8+lenny5_hppa.deb -
Debian libaprutil1_1.2.12+dfsg-8+lenny5_hppa.deb
http://security.debian.org/pool/updates/main/a/apr-util/libaprutil1_1. 2.12+dfsg-8+lenny5_hppa.deb
References
Apache APR-util 'apr_brigade_split_line()' Denial of Service Vulnerability
References:
References:
- Apache HTTP Server 2.2.17 Released (Apache Software Foundation)
- APR-util Changelog (Apache Software Foundation)
- CVE-2010-1623 Memory Leak in the Apache Portable Runtime Utility Library (APR-ut (Oracle)
- HPSBUX02645 SSRT100387 rev.1 - HP-UX Apache Web Server, Remote Information Discl (HP)
- PM31601: Z/OS IBM HTTP SERVER FOR WEBSPHERE (POWERED BY APACHE) FIX PACK 7.0.0.1 (IBM)
- Revision 1003494 (Apache Software Foundation)
- ASA-2010-374 apr-util security update (RHSA-2010-0950) (Avaya)
- ASA-2010-375 CVE-2010-1623 Memory Leak in the Apache Portable Runtime Utility Li (Avaya)
- IBM HTTP Server FIX PACK 6.1.0.35 Released (IBM)
- Interstage HTTP Server: Four Security Vulnerabilities (CVE-2009-1891/ CVE-2009-2 (Fujitsu)
- PM25599: Z/OS IBM HTTP SERVER FOR WEBSPHERE (POWERED BY APACHE) FIX PACK 6.1.0.3 (IBM)
- Problem of increasing memory usage Cosminexus HTTP Server, in Hitachi Web Server (Hitachi)
- SE45571 - HTTPSVR - PATCH APACHE VULNERABILITY CVE-2010-1623 AND CVE-2009-1891 (IBM)
- September 13, 2011 - Director multiple Apache vulnerabilities (Blue Coat)