Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
BID:8911
Info
Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
| Bugtraq ID: | 8911 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0542 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 28 2003 12:00AM |
| Updated: | Jun 07 2011 09:00PM |
| Credit: | The disclosure of this issue has been credited to André Malo. |
| Vulnerable: |
Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Workstation 6.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Server 6.5 Turbolinux Turbolinux Server 6.1 Turbolinux Turbolinux Advanced Server 6.0 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Cobalt RaQ XTR Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux -current SGI ProPack 2.4 SGI ProPack 2.3 SCO Unixware 7.1.3 SCO Unixware 7.1.1 SCO Open UNIX 8.0 RedHat Stronghold 4.0 Red Hat Fedora Core1 IBM HTTP Server 2.0.47 IBM HTTP Server 2.0.42 .2 IBM HTTP Server 1.3.19 HP Webproxy 2.1 HP Webproxy 2.0 HP VirtualVault 4.7 HP VirtualVault 4.6 HP VirtualVault 4.5 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenVMS Secure Web Server 2.1-1 HP HP-UX 11.22 HP HP-UX 11.20 HP HP-UX 11.11 HP HP-UX 11.0 HP HP-UX B.11.22 HP HP-UX B.11.11 HP HP-UX B.11.00 Apache Software Foundation Apache 2.0.47 Apache Software Foundation Apache 2.0.46 Apache Software Foundation Apache 2.0.45 Apache Software Foundation Apache 2.0.44 Apache Software Foundation Apache 2.0.43 Apache Software Foundation Apache 2.0.42 Apache Software Foundation Apache 2.0.41 Apache Software Foundation Apache 2.0.40 Apache Software Foundation Apache 2.0.39 Apache Software Foundation Apache 2.0.38 Apache Software Foundation Apache 2.0.37 Apache Software Foundation Apache 2.0.36 Apache Software Foundation Apache 2.0.35 Apache Software Foundation Apache 2.0.32 Apache Software Foundation Apache 2.0.28 Apache Software Foundation Apache 2.0 Apache Software Foundation Apache 1.3.28 Apache Software Foundation Apache 1.3.27 Apache Software Foundation Apache 1.3.26 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 Apache Software Foundation Apache 1.3.23 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.6 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3 |
| Not Vulnerable: |
HP OpenVMS Secure Web Server 2.2 Apache Software Foundation Apache 2.0.48 Apache Software Foundation Apache 1.3.29 |
Discussion
Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
A vulnerability has been reported in Apache that may allow a local attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by the software, leading to a buffer overflow condition. The problem is reported to exist in the mod_alias and mod_rewrite modules when a regular expression is configured with more the 9 captures using parenthesis.
This issue may allow an attacker to gain unauthorized access to a vulnerable host. Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the web server in order to gain unauthorized access to a vulnerable system.
A vulnerability has been reported in Apache that may allow a local attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by the software, leading to a buffer overflow condition. The problem is reported to exist in the mod_alias and mod_rewrite modules when a regular expression is configured with more the 9 captures using parenthesis.
This issue may allow an attacker to gain unauthorized access to a vulnerable host. Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the web server in order to gain unauthorized access to a vulnerable system.
Exploit / POC
Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Slackware Linux -current
Sun Solaris 8_sparc
Red Hat Fedora Core1
Sun Cobalt RaQ XTR
Sun Solaris 8_x86
Apache Software Foundation Apache 1.3
Apache Software Foundation Apache 1.3.1
Apache Software Foundation Apache 1.3.14
Apache Software Foundation Apache 1.3.17
Apache Software Foundation Apache 1.3.22
Apache Software Foundation Apache 1.3.23
Apache Software Foundation Apache 1.3.25
Apache Software Foundation Apache 1.3.26
Apache Software Foundation Apache 1.3.27
Apache Software Foundation Apache 1.3.28
Apache Software Foundation Apache 1.3.3
Apache Software Foundation Apache 1.3.4
Apache Software Foundation Apache 2.0
Apache Software Foundation Apache 2.0.28
Apache Software Foundation Apache 2.0.32
Apache Software Foundation Apache 2.0.35
Apache Software Foundation Apache 2.0.36
Apache Software Foundation Apache 2.0.37
Apache Software Foundation Apache 2.0.38
Apache Software Foundation Apache 2.0.39
Apache Software Foundation Apache 2.0.40
Apache Software Foundation Apache 2.0.41
IBM HTTP Server 2.0.42 .2
Apache Software Foundation Apache 2.0.42
Apache Software Foundation Apache 2.0.43
Apache Software Foundation Apache 2.0.44
Apache Software Foundation Apache 2.0.45
Apache Software Foundation Apache 2.0.46
Apache Software Foundation Apache 2.0.47
IBM HTTP Server 2.0.47
SGI ProPack 2.3
SGI ProPack 2.4
Turbolinux Turbolinux Advanced Server 6.0
Turbolinux Turbolinux Workstation 6.0
Turbolinux Turbolinux Server 6.1
Turbolinux Turbolinux Server 6.5
Turbolinux Turbolinux Server 7.0
Turbolinux Turbolinux Workstation 7.0
SCO Unixware 7.1.1
SCO Unixware 7.1.3
Turbolinux Turbolinux Workstation 8.0
SCO Open UNIX 8.0
Turbolinux Turbolinux Server 8.0
Slackware Linux 8.1
Slackware Linux 9.0
Slackware Linux 9.1
Solution:
Updates are available. Please see the references for more information.
Slackware Linux -current
-
Slackware apache-1.3.29-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/ap ache-1.3.29-i486-1.tgz -
Slackware mod_ssl-2.8.16_1.3.29-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/mo d_ssl-2.8.16_1.3.29-i486-1.tgz -
Slackware php-4.3.3-i486-3.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/ph p-4.3.3-i486-3.tgz
Sun Solaris 8_sparc
Red Hat Fedora Core1
-
Fedora mod_ssl-2.0.48-1.2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /mod_ssl-2.0.48-1.2.i386.rpm -
Fedora httpd-manual-2.0.48-1.2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /httpd-manual-2.0.48-1.2.i386.rpm -
Fedora httpd-debuginfo-2.0.48-1.2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/httpd-debuginfo-2.0.48-1.2.i386.rpm -
Fedora httpd-devel-2.0.48-1.2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /httpd-devel-2.0.48-1.2.i386.rpm -
Fedora httpd-2.0.48-1.2.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /httpd-2.0.48-1.2.i386.rpm
Sun Cobalt RaQ XTR
-
Sun RaQXTR-All-Security-1.0.1-16644.pkg
http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng/RaQXTR-All-Security- 1.0.1-16644.pkg
Sun Solaris 8_x86
Apache Software Foundation Apache 1.3
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 1.3.1
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 1.3.14
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Engarde Secure Linux apache-1.3.27-1.0.34.i686.rpm
ftp://ftp.engardelinux.org/pub/engarde/ -
Engarde Secure Linux apache-1.3.27-1.0.34.i386.rpm
ftp://ftp.engardelinux.org/pub/engarde/
Apache Software Foundation Apache 1.3.17
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 1.3.22
-
Conectiva apache-doc-1.3.28-1U80_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/apache-doc-1.3.28-1U80_2cl. i386.rpm -
Conectiva apache-1.3.28-1U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/apache-1.3.28-1U70_2cl.i3 86.rpm -
Conectiva apache-1.3.28-1U80_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/apache-1.3.28-1U80_2cl.i386 .rpm -
Conectiva apache-devel-1.3.28-1U80_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/apache-devel-1.3.28-1U80_2c l.i386.rpm -
Conectiva apache-doc-1.3.28-1U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/apache-doc-1.3.28-1U70_2c l.i386.rpm -
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Sun 114145-02
Solaris 9 Intel
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114145&rev=02 -
Conectiva apache-devel-1.3.28-1U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/apache-devel-1.3.28-1U70_ 2cl.i386.rpm -
Sun 113146-03
Solaris 9 Sparc
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113146&rev=03
Apache Software Foundation Apache 1.3.23
-
Mandrake apache-common-1.3.23-4.3.M82mdk.i586.rpm
Mandrake Multi Network Firewall 8.2
http://www.mandrakesecure.net/en/ftp.php -
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Mandrake apache-1.3.23-4.3.M82mdk.i586.rpm
Mandrake Multi Network Firewall 8.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-modules-1.3.23-4.3.M82mdk.i586.rpm
Mandrake Multi Network Firewall 8.2
http://www.mandrakesecure.net/en/ftp.php
Apache Software Foundation Apache 1.3.25
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 1.3.26
-
Mandrake apache-modules-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Mandrake apache-source-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-devel-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-manual-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-manual-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-source-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-common-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-modules-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-devel-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-source-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-devel-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-modules-1.3.26-6.3.90mdk.i586.rpm
Mandrake Linux 9.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-manual-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-common-1.3.26-6.3.90mdk.x86_64.rpm
Mandrake Corporate Server 2.1/X86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-common-1.3.26-6.3.90mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php
Apache Software Foundation Apache 1.3.27
-
Immunix apache-devel-1.3.27-1.7.1_imnx_2.i386.rpm
http://download.immunix.org/ImmunixOS/7+/Updates/RPMS/apache-devel-1.3 .27-1.7.1_imnx_2.i386.rpm -
Mandrake apache-modules-1.3.27-8.1.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-1.3.27-8.1.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-source-1.3.27-8.1.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Immunix apache-manual-1.3.27-1.7.1_imnx_2.i386.rpm
http://download.immunix.org/ImmunixOS/7+/Updates/RPMS/apache-manual-1. 3.27-1.7.1_imnx_2.i386.rpm -
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Immunix apache-1.3.27-1.7.1_imnx_2.i386.rpm
http://download.immunix.org/ImmunixOS/7+/Updates/RPMS/apache-1.3.27-1. 7.1_imnx_2.i386.rpm -
Mandrake apache-devel-1.3.27-8.1.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-modules-1.3.27-8.1.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-source-1.3.27-8.1.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-devel-1.3.27-8.1.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-1.3.27-8.1.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php
Apache Software Foundation Apache 1.3.28
-
Mandrake apache-devel-1.3.28-3.1.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-source-1.3.28-3.1.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz -
Mandrake apache-1.3.28-3.1.92mdk.i586.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache-modules-1.3.28-3.1.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php
Apache Software Foundation Apache 1.3.3
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 1.3.4
-
Apache Software Foundation apache_1.3.29.tar.gz
http://apache.mirror.secondchapter.info/httpd/apache_1.3.29.tar.gz
Apache Software Foundation Apache 2.0
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.28
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.32
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.35
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.36
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.37
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.38
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.39
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.40
-
RedHat httpd-2.0.40-11.9.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/httpd-2.0.40-11.9.i386.rpm -
RedHat mod_ssl-2.0.40-11.9.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/mod_ssl-2.0.40-11.9.i386.rpm -
RedHat httpd-manual-2.0.40-11.9.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/httpd-manual-2.0.40-11.9.i386. rpm -
RedHat httpd-manual-2.0.40-21.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/httpd-manual-2.0.40-21.9.i386.rp m -
RedHat httpd-devel-2.0.40-11.9.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/httpd-devel-2.0.40-11.9.i386.r pm -
RedHat httpd-devel-2.0.40-21.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/httpd-devel-2.0.40-21.9.i386.rpm -
RedHat httpd-2.0.40-21.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/httpd-2.0.40-21.9.i386.rpm -
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz -
RedHat mod_ssl-2.0.40-21.9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mod_ssl-2.0.40-21.9.i386.rpm
Apache Software Foundation Apache 2.0.41
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
IBM HTTP Server 2.0.42 .2
Apache Software Foundation Apache 2.0.42
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.43
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.44
-
Mandrake apache2-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_ldap-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz -
Mandrake apache2-source-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-devel-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Conectiva apache-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-2.0.45-28790U90_5cl. i386.rpm -
Mandrake apache2-manual-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libapr0-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-source-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-devel-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Conectiva libapr-devel-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr-devel-2.0.45-28790U9 0_5cl.i386.rpm -
Conectiva apache-devel-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-devel-2.0.45-28790U9 0_5cl.i386.rpm -
Conectiva mod_dav-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/mod_dav-2.0.45-28790U90_5cl .i386.rpm -
Mandrake apache2-modules-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_dav-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Conectiva libapr0-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr0-2.0.45-28790U90_5cl .i386.rpm -
Mandrake apache2-mod_dav-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Conectiva apache-htpasswd-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-htpasswd-2.0.45-2879 0U90_5cl.i386.rpm -
Mandrake apache2-mod_ssl-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Conectiva mod_auth_ldap-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/mod_auth_ldap-2.0.45-28790U 90_5cl.i386.rpm -
Mandrake apache2-common-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libapr0-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Conectiva libapr-devel-static-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libapr-devel-static-2.0.45- 28790U90_5cl.i386.rpm -
Mandrake apache2-common-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-manual-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_ldap-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-modules-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-2.0.47-1.6.91mdk.i586.rpm
Mandrake Linux 9.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_ssl-2.0.47-1.6.91mdk.ppc.rpm
Mandrake Linux 9.1/PPC
http://www.mandrakesecure.net/en/ftp.php -
Conectiva apache-doc-2.0.45-28790U90_5cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/apache-doc-2.0.45-28790U90_ 5cl.i386.rpm
Apache Software Foundation Apache 2.0.45
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.46
-
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz
Apache Software Foundation Apache 2.0.47
-
Mandrake apache2-mod_ssl-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-modules-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-common-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-manual-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_dav-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_ldap-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_file_cache-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-source-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-devel-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_deflate-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_disk_cache-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Apache Software Foundation httpd-2.0.48.tar.gz
http://apache.sunsite.ualberta.ca/httpd/httpd-2.0.48.tar.gz -
Mandrake apache2-2.0.47-6.4.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_proxy-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libapr0-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake apache2-mod_mem_cache-2.0.47-6.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php
IBM HTTP Server 2.0.47
SGI ProPack 2.3
-
SGI patch10039.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.3/patch1 0039.tar.gz
SGI ProPack 2.4
-
SGI patch10044.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.4/patch1 0044.tar.gz
Turbolinux Turbolinux Advanced Server 6.0
-
Turbolinux apache-manual-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/AdvancedServer /6/ja/updates/RPMS/apache-manual-1.3.27-22.i386.rpm -
Turbolinux apache-devel-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/AdvancedServer /6/ja/updates/RPMS/apache-devel-1.3.27-22.i386.rpm -
Turbolinux apache-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/AdvancedServer /6/ja/updates/RPMS/apache-1.3.27-22.i386.rpm -
Turbolinux mod_ssl-2.8.14-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/AdvancedServer /6/ja/updates/RPMS/mod_ssl-2.8.14-22.i386.rpm
Turbolinux Turbolinux Workstation 6.0
-
Turbolinux apache-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/6. 0/ja/updates/RPMS/apache-1.3.27-22.i386.rpm -
Turbolinux apache-devel-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/6. 0/ja/updates/RPMS/apache-devel-1.3.27-22.i386.rpm -
Turbolinux apache-manual-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/6. 0/ja/updates/RPMS/apache-manual-1.3.27-22.i386.rpm
Turbolinux Turbolinux Server 6.1
-
Turbolinux apache-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.1/ja/ updates/RPMS/apache-1.3.27-22.i386.rpm -
Turbolinux apache-devel-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.1/ja/ updates/RPMS/apache-devel-1.3.27-22.i386.rpm -
Turbolinux apache-manual-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.1/ja/ updates/RPMS/apache-manual-1.3.27-22.i386.rpm -
Turbolinux mod_ssl-2.8.14-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.1/ja/ updates/RPMS/mod_ssl-2.8.14-22.i386.rpm
Turbolinux Turbolinux Server 6.5
-
Turbolinux apache-manual-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.5/upd ates/RPMS/apache-manual-1.3.27-22.i386.rpm -
Turbolinux mod_ssl-2.8.14-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.5/upd ates/RPMS/mod_ssl-2.8.14-22.i386.rpm -
Turbolinux apache-devel-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.5/upd ates/RPMS/apache-devel-1.3.27-22.i386.rpm -
Turbolinux apache-1.3.27-22.i386.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.5/upd ates/RPMS/apache-1.3.27-22.i386.rpm
Turbolinux Turbolinux Server 7.0
-
Turbolinux apache-manual-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updat es/RPMS/apache-manual-1.3.27-22.i586.rpm -
Turbolinux apache-devel-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updat es/RPMS/apache-devel-1.3.27-22.i586.rpm -
Turbolinux mod_ssl-2.8.14-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updat es/RPMS/mod_ssl-2.8.14-22.i586.rpm -
Turbolinux apache-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updat es/RPMS/apache-1.3.27-22.i586.rpm
Turbolinux Turbolinux Workstation 7.0
-
Turbolinux apache-devel-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/ updates/RPMS/apache-devel-1.3.27-22.i586.rpm -
Turbolinux mod_ssl-2.8.14-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/ updates/RPMS/mod_ssl-2.8.14-22.i586.rpm -
Turbolinux apache-manual-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/ updates/RPMS/apache-manual-1.3.27-22.i586.rpm -
Turbolinux apache-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/ updates/RPMS/apache-1.3.27-22.i586.rpm
SCO Unixware 7.1.1
-
SCO apache.pkg
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/
SCO Unixware 7.1.3
-
SCO apache.pkg
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/
Turbolinux Turbolinux Workstation 8.0
-
Turbolinux apache-manual-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/ updates/RPMS/apache-manual-1.3.27-22.i586.rpm -
Turbolinux apache-devel-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/ updates/RPMS/apache-devel-1.3.27-22.i586.rpm -
Turbolinux apache-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/ updates/RPMS/apache-1.3.27-22.i586.rpm -
Turbolinux mod_ssl-2.8.14-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/ updates/RPMS/mod_ssl-2.8.14-22.i586.rpm
SCO Open UNIX 8.0
-
SCO apache.pkg
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/
Turbolinux Turbolinux Server 8.0
-
Turbolinux apache-devel-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updat es/RPMS/apache-devel-1.3.27-22.i586.rpm -
Turbolinux mod_ssl-2.8.14-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updat es/RPMS/mod_ssl-2.8.14-22.i586.rpm -
Turbolinux apache-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updat es/RPMS/apache-1.3.27-22.i586.rpm -
Turbolinux apache-manual-1.3.27-22.i586.rpm
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updat es/RPMS/apache-manual-1.3.27-22.i586.rpm
Slackware Linux 8.1
-
Slackware mod_ssl-2.8.16_1.3.29-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/m od_ssl-2.8.16_1.3.29-i386-1.tgz -
Slackware apache-1.3.29-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/a pache-1.3.29-i386-1.tgz -
Slackware php-4.3.3-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/p hp-4.3.3-i386-1.tgz
Slackware Linux 9.0
-
Slackware php-4.3.3-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/p hp-4.3.3-i386-1.tgz -
Slackware mod_ssl-2.8.16_1.3.29-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/m od_ssl-2.8.16_1.3.29-i386-1.tgz -
Slackware apache-1.3.29-i386-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/a pache-1.3.29-i386-1.tgz
Slackware Linux 9.1
-
Slackware mod_ssl-2.8.16_1.3.29-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/m od_ssl-2.8.16_1.3.29-i486-1.tgz -
Slackware apache-1.3.29-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/a pache-1.3.29-i486-1.tgz
References
Apache Web Server Multiple Module Local Buffer Overflow Vulnerability
References:
References:
- Apache Homepage (Apache Software Foundation)
- Apache httpd Release 2.0 Changes (Apache Software Foundation)
- HPSBUX01098 ApacheStrong remote Denial of Service or arbitrary code execution (HP)
- HPSBUX0401-306 (HP)
- OpenBSD 3.3 release errata & patch list (OpenBSD)
- OpenBSD 3.4 release errata & patch list (OpenBSD)
- PQ85834; 2.0.47: PQ85834 cumulative fix for IBM HTTP Server V2.0.47 and V2.0.42 (IBM)
- RaQ XTR Patch Page (Sun)
- RHSA-2004:139-05 - Stronghold 4: New release fixes OpenSSL and Apache issues (RedHat)
- RHSA-2005:816-10 - apache, mod_ssl, php update for Stronghold (RedHat)
- Sun Alert ID: 57496 (Sun)