Apache APR 'apr_fnmatch()' Denial of Service Vulnerability

Bugtraq ID:	47820
Class:	Design Error
CVE:	CVE-2011-0419
Remote:	Yes
Local:	No
Published:	May 12 2011 12:00AM
Updated:	May 07 2015 05:06PM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Xerox FreeFlow Print Server (FFPS) 73.C0.41 Xerox FreeFlow Print Server (FFPS) 73.B3.61 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Sun Solaris 9_x86 Update 5 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 7.0 Sun Solaris 9 Sun Solaris 11 Express Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10 Express Sun Solaris 10 Sun Secure Global Desktop 4.3 Sun Secure Global Desktop 4.2 Slackware Linux x86_64 -current Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current RedHat JBoss Enterprise Web Server EL4 0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop version 4 Red Hat JBoss Enterprise Web Server for Windows 1.0 Red Hat JBoss Enterprise Web Server for Solaris 1.0 Red Hat JBoss Enterprise Web Server for RHEL 6 1.0 Red Hat JBoss Enterprise Web Server for RHEL 5 Server 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 ES 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 AS 1.0 Red Hat JBoss Enterprise Web Server 5.0 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux 5 Server Oracle Oracle HTTP Server 9.2 .8 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle HTTP Server 9.1 Oracle Oracle HTTP Server 9.0.3 .1 Oracle Oracle HTTP Server 9.0.2 .3 + Oracle Oracle9i Application Server 9.0.2 .3 Oracle Oracle HTTP Server 9.0.2 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 8.1.7 + Apache Software Foundation Apache 1.3.12 + Oracle Oracle8 8.1.7 + Oracle Oracle8i Enterprise Edition 8.1.7 .0.0 + Oracle Oracle8i Standard Edition 8.1.7 Oracle Oracle HTTP Server 1.0.2 .2 Roll up 2 Oracle Oracle HTTP Server 1.0.2 .2 Oracle Oracle HTTP Server 1.0.2 .1 Oracle Oracle HTTP Server 1.0.2 .0 Oracle Oracle HTTP Server 11.1.1.5 Oracle Oracle HTTP Server 11.1.1.4 Oracle Oracle HTTP Server 11.1.1.3 Oracle Oracle HTTP Server 10.1.3.5 Oracle Oracle HTTP Server 10.1.2.3 NetBSD NetBSD 4.0.2 NetBSD NetBSD 4.0.1 NetBSD NetBSD Current NetBSD NetBSD 4.1 NetBSD NetBSD 4.0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 IBM HTTP Server 7.0 .11 IBM HTTP Server 6.1 .31 IBM HTTP Server 6.1 .27 IBM HTTP Server 6.1 .25 IBM HTTP Server 6.1 .19 IBM HTTP Server 6.1 .17 IBM HTTP Server 6.1 .15 IBM HTTP Server 7.0.0.5 IBM HTTP Server 7.0.0.17 IBM HTTP Server 7.0.0.15 IBM HTTP Server 7.0.0.13 IBM HTTP Server 7.0 IBM HTTP Server 6.1.0.35 IBM HTTP Server 6.1.0.13 IBM HTTP Server 6.1.0.1 IBM HTTP Server 6.1.0 HP System Management Homepage 6.2.2 7 HP System Management Homepage 6.0 .96 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.0-68 HP System Management Homepage 0 HP OpenVMS Secure Web Server 2.2 HP HP-UX Web Server Suite 3.18 HP HP-UX Web Server Suite 3.17 HP HP-UX Web Server Suite 2.33 HP HP-UX B.11.31 Gentoo Linux Fujitsu INTERSTAGE Studio Standard-J Edition 9.2 Fujitsu INTERSTAGE Studio Standard-J Edition 9.1 Fujitsu INTERSTAGE Studio Standard-J Edition 9.0 Fujitsu INTERSTAGE Studio Standard-J Edition 8.0.1 Fujitsu INTERSTAGE Studio Standard-J Edition 9.1.0 B Fujitsu INTERSTAGE Studio Enterprise Edition 9.2 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1 Fujitsu INTERSTAGE Studio Enterprise Edition 9.0 Fujitsu INTERSTAGE Studio Enterprise Edition 8.0.1 Fujitsu INTERSTAGE Studio Enterprise Edition 9.1.0 B Fujitsu INTERSTAGE Job Workload Server 8.1 Fujitsu INTERSTAGE Business Application Server Enterprise 8.0.0 Fujitsu INTERSTAGE Apworks Modelers-J Edition 7.0 L10 Fujitsu INTERSTAGE Apworks Modelers-J Edition 7.0 Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0A Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0 L10A Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0 L10 Fujitsu INTERSTAGE Apworks Modelers-J Edition 6.0 Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L20A Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L20 Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L11 Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L10B Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L10A Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 L10 Fujitsu iNTERSTAGE Application Server Web-J Edition 5.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.2 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.1 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 A Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.3 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.2 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1.0B Fujitsu iNTERSTAGE Application Server Standard Edition 8.0.3 Fujitsu iNTERSTAGE Application Server Standard Edition 8.0 Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L20A Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L20 Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L11 Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L10B Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L10A Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 L10 Fujitsu iNTERSTAGE Application Server Standard Edition 5.0 Fujitsu Interstage Application Server Plus 6.0.2 Fujitsu Interstage Application Server Plus 6.0.1 Fujitsu Interstage Application Server Plus 7.0 L11 Fujitsu Interstage Application Server Plus 7.0 L10 Fujitsu Interstage Application Server Plus 7.0 Fujitsu Interstage Application Server Plus 6.0 L11 Fujitsu Interstage Application Server Plus 6.0 L10C Fujitsu Interstage Application Server Plus 6.0 L10B Fujitsu Interstage Application Server Plus 6.0 L10A Fujitsu Interstage Application Server Plus 6.0 L10 Fujitsu Interstage Application Server Plus 6.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.1 B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 A Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.3 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.1.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0A Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 L11 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 L10 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0A Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10C Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10B Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L20A Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L20 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L11 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L10B Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L10A Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 L10 Fujitsu INTERSTAGE Application Server Enterprise Edition 5.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Voice Portal 5.1.2 Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 SP1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Messaging Storage Server 5.2.8 Avaya Messaging Storage Server 5.2.2 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 SP2 Avaya Messaging Storage Server 5.1 SP1 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2.2 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya IR 4.0 Avaya IP Office Application Server 7.0 Avaya IP Office Application Server 6.1 Avaya IP Office Application Server 6.0 Avaya IP Office Application Server 5.0.1 Avaya IP Office Application Server 5.0 Avaya Interactive Response 4.0 Avaya Call Management System R 16.0 Avaya Call Management System R 15.0 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 4.0 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Communication Manager Utility Services 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Communication Manager 4.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac Os X Server 10.7.1 Apple Mac Os X Server 10.7 Apple Mac Os X Server 10.6.8 Apple Mac Os X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac Os X 10.7.1 Apple Mac OS X 10.6 Apache Software Foundation APR 1.4.3 Apache Software Foundation APR 1.4.2 Apache Software Foundation Apache 2.2.15 Apache Software Foundation Apache 2.2.14 Apache Software Foundation Apache 2.2.13 Apache Software Foundation Apache 2.2.12 Apache Software Foundation Apache 2.2.11 Apache Software Foundation Apache 2.2.10 Apache Software Foundation Apache 2.2.9 Apache Software Foundation Apache 2.2.8 Apache Software Foundation Apache 2.2.6 Apache Software Foundation Apache 2.2.5 Apache Software Foundation Apache 2.2.4 Apache Software Foundation Apache 2.2.3 Apache Software Foundation Apache 2.2.2 Apache Software Foundation Apache 2.2 Apache Software Foundation Apache 2.2.7-dev Apache Software Foundation Apache 2.2.6-dev Apache Software Foundation Apache 2.2.5-dev Apache Software Foundation Apache 2.2.17 Apache Software Foundation Apache 2.2.16 Apache Software Foundation Apache 2.2.15-dev Apache Software Foundation Apache 2.2.1
Not Vulnerable:	Sun Secure Global Desktop 4.62 Red Hat JBoss Enterprise Web Server for Windows 1.0.2 Red Hat JBoss Enterprise Web Server for Solaris 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 6 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 5 Server 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 4 ES 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 4 AS 1.0.2 IBM HTTP Server 8.0.0.1 IBM HTTP Server 7.0.0.19 IBM HTTP Server 6.1.0.39 HP System Management Homepage 7.0 Apple Mac Os X Server 10.7.2 Apple Mac Os X 10.7.2 Apache Software Foundation APR 1.4.4 Apache Software Foundation Apache 2.2.18

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability

Apache APR is prone to a vulnerability that may allow attackers to cause a denial-of-service condition.

Apache APR versions prior to 1.4.4 are vulnerable.

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/47820.txt

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Slackware Linux 12.2

• Slackware apr-1.4.4-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ apr-1.4.4-i486-1_slack12.2.tgz


• Slackware apr-util-1.3.11-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ apr-util-1.3.11-i486-1_slack12.2.tgz


• Slackware httpd-2.2.18-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ httpd-2.2.18-i486-1_slack12.2.tgz

Apple Mac OS X 10.6.8

• Apple SecUpd2011-006Snow.dmg
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64apr-devel-1.3.3-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64apr1-1.3.3-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libapr-devel-1.3.3-2.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libapr1-1.3.3-2.2mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/download/

Apple Mac OS X 10.7.1

• Apple MacOSXUpd10.7.2.dmg
  http://www.apple.com/support/downloads/

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability

References:

• 2014-08 Security Bulletin: Network and Security Manager NSM: Multiple vulnerabil (Juniper)
  
• Apache APR Homepage (Apache)
  
• Changes for APR 1.4.4 (Apache)
  
• CVE-2011-0419 Denial of Service (DoS) vulnerability in Solaris C Library (Oracle)
  
• CVE-2011-3192 and CVE-2011-0419 affect Oracle Secure Global Desktop (Oracle)
  
• Diff for /src/lib/libc/gen/fnmatch.c between version 1.21 and 1.22 (NetBSD)
  
• Fix list for IBM HTTP Server Version 7.0 (IBM)
  
• moderate: apr_fnmatch flaw leads to mod_autoindex remote DoS (Apache)
  
• Multiple Vendors libc/fnmatch(3) DoS (incl apache) (SecurityReason)
  
• PM38826: apr_fnmatch() routine can result in high CPU with use of mod_autoindex (IBM)
  
• [security bulletin] HPSBMU02704 SSRT100619 rev.1 - HP OpenView Network Node Man (HP)
  
• ASA-2011-154 apr security update (RHSA-2011-0507) (Avaya)
  
• ASA-2011-332 Multiple vulnerabilities in Apache Portable Runtime (APR) library a (Avaya)
  
• HPSBMU02748 SSRT100772 rev.1 - HP OpenView Network Node Manager (OV NNM) Running (HP)
  
• HPSBOV02822 SSRT100966 rev.1 - HP Secure Web Server (SWS) for OpenVMS, Remote De (HP)
  
• Interstage HTTP Server: Two Security Vulnerabilities (CVE-2011-3368/ CVE-2011-04 (Fujitsu)
  
• Multiple vulnerabilities in Apache Portable Runtime (APR) library and Apache HTT (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2012 (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2013 (Oracle)
  
• Oracle Solaris Critical Update CVE-2011-0419 (Avaya)
  
• SE48097 - HTTPSVR - PATCH APACHE VULNERABILITY CVE-2011-0419 (IBM)
  
• Xerox Security Bulletin XRX12-002 (Xerox)
  
• Xerox Security Bulletin XRX13-007 (Xerox)