cvelistv5 - cve-2004-0700

CVE-2004-0700 (GCVE-0-2004-0700)

Vulnerability from cvelistv5 – Published: 2004-07-21 04:00 – Updated: 2024-08-08 00:24

Summary

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

RHSA-2004:405

Vulnerability from csaf_redhat - Published: 2004-07-23 09:26 - Updated: 2025-11-21 17:27

Summary

Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold

Notes

Topic

Updated versions of cross-platform Stronghold that fix security issues in mod_ssl, PHP, and the Apache HTTP Server are now available.

Details

Stronghold 4 contains a number of open source technologies, including PHP, mod_ssl and the Apache HTTP Server. Stefan Esser discovered a flaw when the memory_limit configuration setting was enabled in PHP 4 versions prior to 4.3.8. If a remote attacker could force the PHP interpreter to allocate more memory than the memory_limit setting before script execution begins, then the attacker may be able to supply the contents of a PHP hash table remotely. This hash table could then be used to execute arbitrary code as the 'apache' user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0594 to this issue. It may be possible to exploit this issue if using a non-default PHP configuration with the "register_defaults" setting is changed to "On". Red Hat does not believe that this flaw is exploitable in the default configuration of Stronghold 4. Stefan Esser discovered a flaw in the strip_tags function in versions of PHP prior to 4.3.8. The strip_tags function is commonly used by PHP scripts to prevent cross-site scripting attacks by removing HTML tags from user-supplied form data. By embedding NUL bytes into form data, HTML tags can in some cases be passed intact through the strip_tags function, which may allow a cross-site scripting attack. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0595 to this issue. A stack buffer overflow was discovered in mod_ssl which can be triggered if using the FakeBasicAuth option. If mod_ssl is sent a client certificate with a subject DN field longer than 6000 characters, a stack overflow can occur if FakeBasicAuth has been enabled. In order to exploit this issue, the carefully crafted malicious certificate would have to be signed by a Certificate Authority which mod_ssl is configured to trust. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0488 to this issue. A format string issue was discovered in mod_ssl which can be triggered if mod_ssl is configured to allow a client to proxy to remote SSL sites. If mod_ssl is forced to connect to a remote SSL server using a carefully crafted hostname, an attacker may be able to crash an Apache child process. This issue is not known to allow arbitrary execution of code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0700 to this issue. A denial of service issue was discovered which affects versions of the Apache HTTP Server prior to 1.3.30. On some platforms, when Apache is configured with multiple listening sockets, a short-lived connection to one socket may temporarily block new connections to other sockets. This issue does not affect Stronghold if running on Linux, FreeBSD or HP-UX platforms. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0174 to this issue. Users of Stronghold 4 cross-platform are advised to update to these errata versions, which contain backported security fixes and are not vulnerable to these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated versions of cross-platform Stronghold that fix security issues in\nmod_ssl, PHP, and the Apache HTTP Server are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Stronghold 4 contains a number of open source technologies, including\nPHP, mod_ssl and the Apache HTTP Server.\n\nStefan Esser discovered a flaw when the memory_limit configuration setting\nwas enabled in PHP 4 versions prior to 4.3.8. If a remote attacker could\nforce the PHP interpreter to allocate more memory than the memory_limit\nsetting before script execution begins, then the attacker may be able to\nsupply the contents of a PHP hash table remotely. This hash table could\nthen be used to execute arbitrary code as the \u0027apache\u0027 user. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2004-0594 to this issue.\n\nIt may be possible to exploit this issue if using a non-default PHP\nconfiguration with the \"register_defaults\" setting is changed to \"On\".  Red\nHat does not believe that this flaw is exploitable in the default\nconfiguration of Stronghold 4.\n\nStefan Esser discovered a flaw in the strip_tags function in versions of\nPHP prior to 4.3.8. The strip_tags function is commonly used by PHP scripts\nto prevent cross-site scripting attacks by removing HTML tags from\nuser-supplied form data. By embedding NUL bytes into form data, HTML tags\ncan in some cases be passed intact through the strip_tags function, which\nmay allow a cross-site scripting attack. The Common Vulnerabilities and\nExposures project (cve.mitre.org) has assigned the name CAN-2004-0595 to\nthis issue.\n\nA stack buffer overflow was discovered in mod_ssl which can be triggered if\nusing the FakeBasicAuth option. If mod_ssl is sent a client certificate\nwith a subject DN field longer than 6000 characters, a stack overflow can\noccur if FakeBasicAuth has been enabled. In order to exploit this issue,\nthe carefully crafted malicious certificate would have to be signed by a\nCertificate Authority which mod_ssl is configured to trust. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2004-0488 to this issue.\n\nA format string issue was discovered in mod_ssl which can be triggered if \nmod_ssl is configured to allow a client to proxy to remote SSL sites. \nIf mod_ssl is forced to connect to a remote SSL server using a\ncarefully crafted hostname, an attacker may be able to crash an Apache\nchild process.  This issue is not known to allow arbitrary execution of\ncode.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2004-0700 to this issue.\n\nA denial of service issue was discovered which affects versions of the\nApache HTTP Server prior to 1.3.30.  On some platforms, when Apache is\nconfigured with multiple listening sockets, a short-lived connection to\none socket may temporarily block new connections to other sockets.  This\nissue does not affect Stronghold if running on Linux, FreeBSD or HP-UX\nplatforms.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0174 to this issue.\n\nUsers of Stronghold 4 cross-platform are advised to update to these errata\nversions, which contain backported security fixes and are not vulnerable to\nthese issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:405",
        "url": "https://access.redhat.com/errata/RHSA-2004:405"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "127703",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=127703"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_405.json"
      }
    ],
    "title": "Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold",
    "tracking": {
      "current_release_date": "2025-11-21T17:27:36+00:00",
      "generator": {
        "date": "2025-11-21T17:27:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2004:405",
      "initial_release_date": "2004-07-23T09:26:00+00:00",
      "revision_history": [
        {
          "date": "2004-07-23T09:26:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-07-23T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:27:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Stronghold 4",
                "product": {
                  "name": "Red Hat Stronghold 4",
                  "product_id": "Red Hat Stronghold 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:stronghold:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Stronghold Cross Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0174",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617165"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a \"short-lived connection on a rarely-accessed listening socket.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Not vulnerable.  This issue did not affect Linux.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0174"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617165",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617165"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0174",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0174"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0174",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0174"
        }
      ],
      "release_date": "2004-03-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0488",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl ssl_util_uuencode_binary CA issue",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "RHBZ#430867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488"
        }
      ],
      "release_date": "2004-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl ssl_util_uuencode_binary CA issue"
    },
    {
      "cve": "CVE-2004-0594",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0594"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0594",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0594"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0594",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0594"
        }
      ],
      "release_date": "2004-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0595",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0595"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0595",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0595"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0595",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0595"
        }
      ],
      "release_date": "2004-07-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    }
  ]
}

RHSA-2004_408

Vulnerability from csaf_redhat - Published: 2004-09-07 15:40 - Updated: 2024-11-21 23:08

Summary

Red Hat Security Advisory: mod_ssl security update

Notes

Topic

An updated mod_ssl package for Apache that fixes a format string vulnerability is now available.

Details

The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. A format string issue was discovered in mod_ssl for Apache 1.3 which can be triggered if mod_ssl is configured to allow a client to proxy to remote SSL sites. In order to exploit this issue, a user who is authorized to use Apache as a proxy would have to attempt to connect to a carefully crafted hostname via SSL. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0700 to this issue. Users of mod_ssl should upgrade to this updated package, which contains a backported patch to correct this issue.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated mod_ssl package for Apache that fixes a format string\nvulnerability is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The mod_ssl module provides strong cryptography for the Apache Web\nserver via the Secure Sockets Layer (SSL) and Transport Layer Security\n(TLS) protocols.\n\nA format string issue was discovered in mod_ssl for Apache 1.3 which can be\ntriggered if mod_ssl is configured to allow a client to proxy to remote SSL\nsites.  In order to exploit this issue, a user who is authorized to use\nApache as a proxy would have to attempt to connect to a carefully crafted\nhostname via SSL.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0700 to this issue.\n\nUsers of mod_ssl should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:408",
        "url": "https://access.redhat.com/errata/RHSA-2004:408"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "128170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=128170"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_408.json"
      }
    ],
    "title": "Red Hat Security Advisory: mod_ssl security update",
    "tracking": {
      "current_release_date": "2024-11-21T23:08:47+00:00",
      "generator": {
        "date": "2024-11-21T23:08:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2004:408",
      "initial_release_date": "2004-09-07T15:40:00+00:00",
      "revision_history": [
        {
          "date": "2004-09-07T15:40:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-09-07T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T23:08:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "Red Hat Linux Advanced Workstation 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "Red Hat Enterprise Linux ES version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "Red Hat Enterprise Linux WS version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "Red Hat Enterprise Linux ES version 2.1",
          "Red Hat Enterprise Linux WS version 2.1",
          "Red Hat Linux Advanced Workstation 2.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-09-07T15:40:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  Use Red Hat\nNetwork to download and update your packages.  To launch the Red Hat\nUpdate Agent, use the following command:\n\n    up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n    http://www.redhat.com/docs/manuals/enterprise/",
          "product_ids": [
            "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
            "Red Hat Enterprise Linux ES version 2.1",
            "Red Hat Enterprise Linux WS version 2.1",
            "Red Hat Linux Advanced Workstation 2.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:408"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    }
  ]
}

RHSA-2004_405

Vulnerability from csaf_redhat - Published: 2004-07-23 09:26 - Updated: 2024-11-21 23:08

Summary

Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold

Notes

Topic

Updated versions of cross-platform Stronghold that fix security issues in mod_ssl, PHP, and the Apache HTTP Server are now available.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated versions of cross-platform Stronghold that fix security issues in\nmod_ssl, PHP, and the Apache HTTP Server are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Stronghold 4 contains a number of open source technologies, including\nPHP, mod_ssl and the Apache HTTP Server.\n\nStefan Esser discovered a flaw when the memory_limit configuration setting\nwas enabled in PHP 4 versions prior to 4.3.8. If a remote attacker could\nforce the PHP interpreter to allocate more memory than the memory_limit\nsetting before script execution begins, then the attacker may be able to\nsupply the contents of a PHP hash table remotely. This hash table could\nthen be used to execute arbitrary code as the \u0027apache\u0027 user. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2004-0594 to this issue.\n\nIt may be possible to exploit this issue if using a non-default PHP\nconfiguration with the \"register_defaults\" setting is changed to \"On\".  Red\nHat does not believe that this flaw is exploitable in the default\nconfiguration of Stronghold 4.\n\nStefan Esser discovered a flaw in the strip_tags function in versions of\nPHP prior to 4.3.8. The strip_tags function is commonly used by PHP scripts\nto prevent cross-site scripting attacks by removing HTML tags from\nuser-supplied form data. By embedding NUL bytes into form data, HTML tags\ncan in some cases be passed intact through the strip_tags function, which\nmay allow a cross-site scripting attack. The Common Vulnerabilities and\nExposures project (cve.mitre.org) has assigned the name CAN-2004-0595 to\nthis issue.\n\nA stack buffer overflow was discovered in mod_ssl which can be triggered if\nusing the FakeBasicAuth option. If mod_ssl is sent a client certificate\nwith a subject DN field longer than 6000 characters, a stack overflow can\noccur if FakeBasicAuth has been enabled. In order to exploit this issue,\nthe carefully crafted malicious certificate would have to be signed by a\nCertificate Authority which mod_ssl is configured to trust. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2004-0488 to this issue.\n\nA format string issue was discovered in mod_ssl which can be triggered if \nmod_ssl is configured to allow a client to proxy to remote SSL sites. \nIf mod_ssl is forced to connect to a remote SSL server using a\ncarefully crafted hostname, an attacker may be able to crash an Apache\nchild process.  This issue is not known to allow arbitrary execution of\ncode.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2004-0700 to this issue.\n\nA denial of service issue was discovered which affects versions of the\nApache HTTP Server prior to 1.3.30.  On some platforms, when Apache is\nconfigured with multiple listening sockets, a short-lived connection to\none socket may temporarily block new connections to other sockets.  This\nissue does not affect Stronghold if running on Linux, FreeBSD or HP-UX\nplatforms.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0174 to this issue.\n\nUsers of Stronghold 4 cross-platform are advised to update to these errata\nversions, which contain backported security fixes and are not vulnerable to\nthese issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:405",
        "url": "https://access.redhat.com/errata/RHSA-2004:405"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "127703",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=127703"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_405.json"
      }
    ],
    "title": "Red Hat Security Advisory: apache, mod_ssl, php security update for Stronghold",
    "tracking": {
      "current_release_date": "2024-11-21T23:08:43+00:00",
      "generator": {
        "date": "2024-11-21T23:08:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2004:405",
      "initial_release_date": "2004-07-23T09:26:00+00:00",
      "revision_history": [
        {
          "date": "2004-07-23T09:26:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-07-23T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T23:08:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Stronghold 4",
                "product": {
                  "name": "Red Hat Stronghold 4",
                  "product_id": "Red Hat Stronghold 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:stronghold:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Stronghold Cross Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0174",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617165"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a \"short-lived connection on a rarely-accessed listening socket.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Not vulnerable.  This issue did not affect Linux.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0174"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617165",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617165"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0174",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0174"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0174",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0174"
        }
      ],
      "release_date": "2004-03-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0488",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl ssl_util_uuencode_binary CA issue",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "RHBZ#430867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488"
        }
      ],
      "release_date": "2004-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl ssl_util_uuencode_binary CA issue"
    },
    {
      "cve": "CVE-2004-0594",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0594"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0594",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0594"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0594",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0594"
        }
      ],
      "release_date": "2004-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0595",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0595"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0595",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0595"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0595",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0595"
        }
      ],
      "release_date": "2004-07-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Stronghold 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-07-23T09:26:00+00:00",
          "details": "Updated Stronghold 4 packages are now available via the update agent\nservice. Run the following command from the Stronghold 4 install root to\nupgrade an existing Stronghold 4 installation to the new package versions:\n\n$ bin/agent\n\nThe Stronghold 4.0i patch release which contains these updated packages is\nalso available from the download site.\n\nAfter upgrading Stronghold, the server must be completely restarted by\nrunning the following commands from the install root:\n\n$ bin/stop-server\n$ bin/start-server\n\nFor more information on how to upgrade between releases of Stronghold 4,\nrefer to http://stronghold.redhat.com/support/upgrade-sh4",
          "product_ids": [
            "Red Hat Stronghold 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:405"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    }
  ]
}

RHSA-2008_0523

Vulnerability from csaf_redhat - Published: 2008-06-30 15:29 - Updated: 2024-12-08 10:33

Summary

Red Hat Security Advisory: Red Hat Network Proxy Server security update

Notes

Topic

Red Hat Network Proxy Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Proxy Server components. This update has been rated as having low security impact by the Red Hat Security Response Team.

Details

The Red Hat Network Proxy Server 4.2.3 release corrects several security vulnerabilities in several shipped components. In a typical operating environment, these components are not exposed to users of Proxy Server in a vulnerable manner. These security updates will reduce risk in unique Proxy Server environments. Multiple flaws were fixed in the Apache HTTPD server. These flaws could result in a cross-site scripting or denial-of-service attack. (CVE-2007-6388, CVE-2007-5000, CVE-2007-4465, CVE-2007-3304, CVE-2006-5752, CVE-2006-3918, CVE-2005-3352) A denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349) Multiple flaws in mod_ssl. (CVE-2004-0488, CVE-2004-0700, CVE-2004-0885) A denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329) Users of Red Hat Network Proxy Server 4.2 are advised to upgrade to 4.2.3, which resolves these issues.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Network Proxy Server version 4.2.3 is now available. This update\nincludes fixes for a number of security issues in Red Hat Network Proxy\nServer components.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Network Proxy Server 4.2.3 release corrects several security\nvulnerabilities in several shipped components. In a typical operating\nenvironment, these components are not exposed to users of Proxy Server in a\nvulnerable manner. These security updates will reduce risk in unique Proxy\nServer environments.\n\nMultiple flaws were fixed in the Apache HTTPD server. These flaws could\nresult in a cross-site scripting or denial-of-service attack.\n(CVE-2007-6388, CVE-2007-5000, CVE-2007-4465, CVE-2007-3304, CVE-2006-5752,\nCVE-2006-3918, CVE-2005-3352)\n\nA denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)\n\nMultiple flaws in mod_ssl. (CVE-2004-0488, CVE-2004-0700, CVE-2004-0885)\n\nA denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)\n\nUsers of Red Hat Network Proxy Server 4.2 are advised to upgrade to 4.2.3,\nwhich resolves these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0523",
        "url": "https://access.redhat.com/errata/RHSA-2008:0523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "449336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=449336"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0523.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Network Proxy Server security update",
    "tracking": {
      "current_release_date": "2024-12-08T10:33:39+00:00",
      "generator": {
        "date": "2024-12-08T10:33:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2008:0523",
      "initial_release_date": "2008-06-30T15:29:00+00:00",
      "revision_history": [
        {
          "date": "2008-06-30T15:29:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-06-30T11:32:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-08T10:33:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
                "product": {
                  "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
                  "product_id": "3AS-RHNPROXY4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_proxy:4.2::el3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNPROXY4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_proxy:4.2::el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite Proxy"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jabberd-0:2.0s10-3.37.rhn.i386",
                "product": {
                  "name": "jabberd-0:2.0s10-3.37.rhn.i386",
                  "product_id": "jabberd-0:2.0s10-3.37.rhn.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jabberd@2.0s10-3.37.rhn?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                "product": {
                  "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "product_id": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-modperl-0:1.29-16.rhel3.i386",
                "product": {
                  "name": "rhn-modperl-0:1.29-16.rhel3.i386",
                  "product_id": "rhn-modperl-0:1.29-16.rhel3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jabberd-0:2.0s10-3.38.rhn.i386",
                "product": {
                  "name": "jabberd-0:2.0s10-3.38.rhn.i386",
                  "product_id": "jabberd-0:2.0s10-3.38.rhn.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jabberd@2.0s10-3.38.rhn?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                "product": {
                  "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "product_id": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-modperl-0:1.29-16.rhel4.i386",
                "product": {
                  "name": "rhn-modperl-0:1.29-16.rhel4.i386",
                  "product_id": "rhn-modperl-0:1.29-16.rhel4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jabberd-0:2.0s10-3.37.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386"
        },
        "product_reference": "jabberd-0:2.0s10-3.37.rhn.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386"
        },
        "product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-modperl-0:1.29-16.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386"
        },
        "product_reference": "rhn-modperl-0:1.29-16.rhel3.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jabberd-0:2.0s10-3.38.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386"
        },
        "product_reference": "jabberd-0:2.0s10-3.38.rhn.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386"
        },
        "product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-modperl-0:1.29-16.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        },
        "product_reference": "rhn-modperl-0:1.29-16.rhel4.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0488",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl ssl_util_uuencode_binary CA issue",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "RHBZ#430867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488"
        }
      ],
      "release_date": "2004-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl ssl_util_uuencode_binary CA issue"
    },
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    },
    {
      "cve": "CVE-2004-0885",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430637"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the \"SSLCipherSuite\" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl SSLCipherSuite bypass",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0885"
        },
        {
          "category": "external",
          "summary": "RHBZ#430637",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430637"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885"
        }
      ],
      "release_date": "2004-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl SSLCipherSuite bypass"
    },
    {
      "cve": "CVE-2005-3352",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2005-12-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd cross-site scripting flaw in mod_imap",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-3352"
        },
        {
          "category": "external",
          "summary": "RHBZ#430524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-3352",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352"
        }
      ],
      "release_date": "2005-12-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd cross-site scripting flaw in mod_imap"
    },
    {
      "cve": "CVE-2006-1329",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "429254"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service (\"c2s segfault\") by sending a \"response stanza before an auth stanza\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jabberd SASL DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1329"
        },
        {
          "category": "external",
          "summary": "RHBZ#429254",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=429254"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1329",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1329"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329"
        }
      ],
      "release_date": "2006-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jabberd SASL DoS"
    },
    {
      "cve": "CVE-2006-3918",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2006-07-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "200732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Expect header XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3918"
        },
        {
          "category": "external",
          "summary": "RHBZ#200732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
        }
      ],
      "release_date": "2006-05-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Expect header XSS"
    },
    {
      "cve": "CVE-2006-5752",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-06-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "245112"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform \"charset detection\" when the content-type is not specified.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd mod_status XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-5752"
        },
        {
          "category": "external",
          "summary": "RHBZ#245112",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=245112"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-5752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-5752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752"
        }
      ],
      "release_date": "2007-06-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd mod_status XSS"
    },
    {
      "cve": "CVE-2007-1349",
      "discovery_date": "2007-05-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "240423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_perl PerlRun denial of service",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1349"
        },
        {
          "category": "external",
          "summary": "RHBZ#240423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=240423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1349",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1349"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349"
        }
      ],
      "release_date": "2007-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_perl PerlRun denial of service"
    },
    {
      "cve": "CVE-2007-3304",
      "discovery_date": "2007-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "245111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka \"SIGUSR1 killer.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd scoreboard lack of PID protection",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3304"
        },
        {
          "category": "external",
          "summary": "RHBZ#245111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=245111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304"
        }
      ],
      "release_date": "2007-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd scoreboard lack of PID protection"
    },
    {
      "cve": "CVE-2007-4465",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "289511"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_autoindex XSS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the \"AddDefaultCharset\" directive and are using directory indexes. The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4465"
        },
        {
          "category": "external",
          "summary": "RHBZ#289511",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=289511"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465"
        }
      ],
      "release_date": "2007-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mod_autoindex XSS"
    },
    {
      "cve": "CVE-2007-5000",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-12-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "419931"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_imagemap XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5000"
        },
        {
          "category": "external",
          "summary": "RHBZ#419931",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=419931"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000"
        }
      ],
      "release_date": "2007-12-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_imagemap XSS"
    },
    {
      "cve": "CVE-2007-6388",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2008-01-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "427228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache mod_status cross-site scripting",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-6388"
        },
        {
          "category": "external",
          "summary": "RHBZ#427228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=427228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-6388",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388"
        }
      ],
      "release_date": "2007-12-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "apache mod_status cross-site scripting"
    }
  ]
}

RHSA-2008:0523

Vulnerability from csaf_redhat - Published: 2008-06-30 15:29 - Updated: 2025-11-21 17:33

Summary

Red Hat Security Advisory: Red Hat Network Proxy Server security update

Notes

Topic

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Network Proxy Server version 4.2.3 is now available. This update\nincludes fixes for a number of security issues in Red Hat Network Proxy\nServer components.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Network Proxy Server 4.2.3 release corrects several security\nvulnerabilities in several shipped components. In a typical operating\nenvironment, these components are not exposed to users of Proxy Server in a\nvulnerable manner. These security updates will reduce risk in unique Proxy\nServer environments.\n\nMultiple flaws were fixed in the Apache HTTPD server. These flaws could\nresult in a cross-site scripting or denial-of-service attack.\n(CVE-2007-6388, CVE-2007-5000, CVE-2007-4465, CVE-2007-3304, CVE-2006-5752,\nCVE-2006-3918, CVE-2005-3352)\n\nA denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)\n\nMultiple flaws in mod_ssl. (CVE-2004-0488, CVE-2004-0700, CVE-2004-0885)\n\nA denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)\n\nUsers of Red Hat Network Proxy Server 4.2 are advised to upgrade to 4.2.3,\nwhich resolves these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0523",
        "url": "https://access.redhat.com/errata/RHSA-2008:0523"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "449336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=449336"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0523.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Network Proxy Server security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:33:23+00:00",
      "generator": {
        "date": "2025-11-21T17:33:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2008:0523",
      "initial_release_date": "2008-06-30T15:29:00+00:00",
      "revision_history": [
        {
          "date": "2008-06-30T15:29:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-06-30T11:32:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:33:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
                "product": {
                  "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
                  "product_id": "3AS-RHNPROXY4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_proxy:4.2::el3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNPROXY4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_proxy:4.2::el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite Proxy"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jabberd-0:2.0s10-3.37.rhn.i386",
                "product": {
                  "name": "jabberd-0:2.0s10-3.37.rhn.i386",
                  "product_id": "jabberd-0:2.0s10-3.37.rhn.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jabberd@2.0s10-3.37.rhn?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                "product": {
                  "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "product_id": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-modperl-0:1.29-16.rhel3.i386",
                "product": {
                  "name": "rhn-modperl-0:1.29-16.rhel3.i386",
                  "product_id": "rhn-modperl-0:1.29-16.rhel3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jabberd-0:2.0s10-3.38.rhn.i386",
                "product": {
                  "name": "jabberd-0:2.0s10-3.38.rhn.i386",
                  "product_id": "jabberd-0:2.0s10-3.38.rhn.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jabberd@2.0s10-3.38.rhn?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                "product": {
                  "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "product_id": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn-modperl-0:1.29-16.rhel4.i386",
                "product": {
                  "name": "rhn-modperl-0:1.29-16.rhel4.i386",
                  "product_id": "rhn-modperl-0:1.29-16.rhel4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jabberd-0:2.0s10-3.37.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386"
        },
        "product_reference": "jabberd-0:2.0s10-3.37.rhn.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386"
        },
        "product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-modperl-0:1.29-16.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386"
        },
        "product_reference": "rhn-modperl-0:1.29-16.rhel3.i386",
        "relates_to_product_reference": "3AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jabberd-0:2.0s10-3.38.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386"
        },
        "product_reference": "jabberd-0:2.0s10-3.38.rhn.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386"
        },
        "product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-modperl-0:1.29-16.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        },
        "product_reference": "rhn-modperl-0:1.29-16.rhel4.i386",
        "relates_to_product_reference": "4AS-RHNPROXY4.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0488",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl ssl_util_uuencode_binary CA issue",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "RHBZ#430867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488"
        }
      ],
      "release_date": "2004-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl ssl_util_uuencode_binary CA issue"
    },
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    },
    {
      "cve": "CVE-2004-0885",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430637"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the \"SSLCipherSuite\" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_ssl SSLCipherSuite bypass",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0885"
        },
        {
          "category": "external",
          "summary": "RHBZ#430637",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430637"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885"
        }
      ],
      "release_date": "2004-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_ssl SSLCipherSuite bypass"
    },
    {
      "cve": "CVE-2005-3352",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2005-12-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd cross-site scripting flaw in mod_imap",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-3352"
        },
        {
          "category": "external",
          "summary": "RHBZ#430524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-3352",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352"
        }
      ],
      "release_date": "2005-12-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd cross-site scripting flaw in mod_imap"
    },
    {
      "cve": "CVE-2006-1329",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "429254"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service (\"c2s segfault\") by sending a \"response stanza before an auth stanza\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jabberd SASL DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1329"
        },
        {
          "category": "external",
          "summary": "RHBZ#429254",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=429254"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1329",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1329"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329"
        }
      ],
      "release_date": "2006-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jabberd SASL DoS"
    },
    {
      "cve": "CVE-2006-3918",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2006-07-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "200732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Expect header XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3918"
        },
        {
          "category": "external",
          "summary": "RHBZ#200732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
        }
      ],
      "release_date": "2006-05-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Expect header XSS"
    },
    {
      "cve": "CVE-2006-5752",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-06-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "245112"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform \"charset detection\" when the content-type is not specified.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd mod_status XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-5752"
        },
        {
          "category": "external",
          "summary": "RHBZ#245112",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=245112"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-5752",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-5752"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752"
        }
      ],
      "release_date": "2007-06-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd mod_status XSS"
    },
    {
      "cve": "CVE-2007-1349",
      "discovery_date": "2007-05-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "240423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_perl PerlRun denial of service",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1349"
        },
        {
          "category": "external",
          "summary": "RHBZ#240423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=240423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1349",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1349"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349"
        }
      ],
      "release_date": "2007-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_perl PerlRun denial of service"
    },
    {
      "cve": "CVE-2007-3304",
      "discovery_date": "2007-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "245111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka \"SIGUSR1 killer.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd scoreboard lack of PID protection",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3304"
        },
        {
          "category": "external",
          "summary": "RHBZ#245111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=245111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304"
        }
      ],
      "release_date": "2007-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd scoreboard lack of PID protection"
    },
    {
      "cve": "CVE-2007-4465",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "289511"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_autoindex XSS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the \"AddDefaultCharset\" directive and are using directory indexes. The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4465"
        },
        {
          "category": "external",
          "summary": "RHBZ#289511",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=289511"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465"
        }
      ],
      "release_date": "2007-09-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mod_autoindex XSS"
    },
    {
      "cve": "CVE-2007-5000",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-12-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "419931"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_imagemap XSS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5000"
        },
        {
          "category": "external",
          "summary": "RHBZ#419931",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=419931"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000"
        }
      ],
      "release_date": "2007-12-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_imagemap XSS"
    },
    {
      "cve": "CVE-2007-6388",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2008-01-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "427228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache mod_status cross-site scripting",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
          "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
          "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
          "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
          "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
          "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-6388"
        },
        {
          "category": "external",
          "summary": "RHBZ#427228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=427228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-6388",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388"
        }
      ],
      "release_date": "2007-12-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:29:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0523"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "apache mod_status cross-site scripting"
    }
  ]
}

RHSA-2004:408

Vulnerability from csaf_redhat - Published: 2004-09-07 15:40 - Updated: 2025-11-21 17:27

Summary

Red Hat Security Advisory: mod_ssl security update

Notes

Topic

An updated mod_ssl package for Apache that fixes a format string vulnerability is now available.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated mod_ssl package for Apache that fixes a format string\nvulnerability is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The mod_ssl module provides strong cryptography for the Apache Web\nserver via the Secure Sockets Layer (SSL) and Transport Layer Security\n(TLS) protocols.\n\nA format string issue was discovered in mod_ssl for Apache 1.3 which can be\ntriggered if mod_ssl is configured to allow a client to proxy to remote SSL\nsites.  In order to exploit this issue, a user who is authorized to use\nApache as a proxy would have to attempt to connect to a carefully crafted\nhostname via SSL.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0700 to this issue.\n\nUsers of mod_ssl should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:408",
        "url": "https://access.redhat.com/errata/RHSA-2004:408"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "128170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=128170"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_408.json"
      }
    ],
    "title": "Red Hat Security Advisory: mod_ssl security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:27:37+00:00",
      "generator": {
        "date": "2025-11-21T17:27:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2004:408",
      "initial_release_date": "2004-09-07T15:40:00+00:00",
      "revision_history": [
        {
          "date": "2004-09-07T15:40:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-09-07T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:27:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "Red Hat Linux Advanced Workstation 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "Red Hat Enterprise Linux ES version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "Red Hat Enterprise Linux WS version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0700",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_proxy hook format string",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "Red Hat Enterprise Linux ES version 2.1",
          "Red Hat Enterprise Linux WS version 2.1",
          "Red Hat Linux Advanced Workstation 2.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "RHBZ#430866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
        }
      ],
      "release_date": "2004-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-09-07T15:40:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  Use Red Hat\nNetwork to download and update your packages.  To launch the Red Hat\nUpdate Agent, use the following command:\n\n    up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n    http://www.redhat.com/docs/manuals/enterprise/",
          "product_ids": [
            "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
            "Red Hat Enterprise Linux ES version 2.1",
            "Red Hat Enterprise Linux WS version 2.1",
            "Red Hat Linux Advanced Workstation 2.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:408"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mod_proxy hook format string"
    }
  ]
}

GHSA-MM6M-9RF6-5J2Q

Vulnerability from github – Published: 2022-04-29 02:58 – Updated: 2025-04-03 03:59

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2004-0700"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2004-07-27T04:00:00Z",
    "severity": "HIGH"
  },
  "details": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
  "id": "GHSA-mm6m-9rf6-5j2q",
  "modified": "2025-04-03T03:59:48Z",
  "published": "2022-04-29T02:58:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=1888"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"
    },
    {
      "type": "WEB",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000857"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=apache-modssl\u0026m=109001100906749\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=109005001205991\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"
    },
    {
      "type": "WEB",
      "url": "http://virulent.siyahsapka.org"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2004/dsa-532"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/303448"
    },
    {
      "type": "WEB",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/7929"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-405.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-408.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/10736"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-177-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2004-0700

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2004-0700

Aliases

CVE-2004-0700

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2004-0700",
    "description": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
    "id": "GSD-2004-0700",
    "references": [
      "https://www.suse.com/security/cve/CVE-2004-0700.html",
      "https://www.debian.org/security/2004/dsa-532",
      "https://access.redhat.com/errata/RHSA-2008:0523",
      "https://access.redhat.com/errata/RHSA-2004:408",
      "https://access.redhat.com/errata/RHSA-2004:405"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2004-0700"
      ],
      "details": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
      "id": "GSD-2004-0700",
      "modified": "2023-12-13T01:22:54.608145Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2004-0700",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://virulent.siyahsapka.org/",
            "refsource": "MISC",
            "url": "http://virulent.siyahsapka.org/"
          },
          {
            "name": "7929",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/7929"
          },
          {
            "name": "USN-177-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-177-1"
          },
          {
            "name": "10736",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/10736"
          },
          {
            "name": "RHSA-2004:405",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-405.html"
          },
          {
            "name": "apache-modssl-format-string(16705)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"
          },
          {
            "name": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"
          },
          {
            "name": "CLA-2004:857",
            "refsource": "CONECTIVA",
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000857"
          },
          {
            "name": "MDKSA-2004:075",
            "refsource": "MANDRAKE",
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"
          },
          {
            "name": "DSA-532",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2004/dsa-532"
          },
          {
            "name": "RHSA-2004:408",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-408.html"
          },
          {
            "name": "FLSA:1888",
            "refsource": "FEDORA",
            "url": "https://bugzilla.fedora.us/show_bug.cgi?id=1888"
          },
          {
            "name": "[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31",
            "refsource": "MLIST",
            "url": "http://marc.info/?l=apache-modssl\u0026m=109001100906749\u0026w=2"
          },
          {
            "name": "VU#303448",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/303448"
          },
          {
            "name": "20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=109005001205991\u0026w=2"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.15:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.3.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.18:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0700"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#303448",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/303448"
            },
            {
              "name": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt",
              "refsource": "MISC",
              "tags": [],
              "url": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"
            },
            {
              "name": "http://virulent.siyahsapka.org/",
              "refsource": "MISC",
              "tags": [],
              "url": "http://virulent.siyahsapka.org/"
            },
            {
              "name": "DSA-532",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2004/dsa-532"
            },
            {
              "name": "FLSA:1888",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://bugzilla.fedora.us/show_bug.cgi?id=1888"
            },
            {
              "name": "MDKSA-2004:075",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"
            },
            {
              "name": "RHSA-2004:405",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-405.html"
            },
            {
              "name": "RHSA-2004:408",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-408.html"
            },
            {
              "name": "10736",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/10736"
            },
            {
              "name": "7929",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/7929"
            },
            {
              "name": "USN-177-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-177-1"
            },
            {
              "name": "CLA-2004:857",
              "refsource": "CONECTIVA",
              "tags": [],
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000857"
            },
            {
              "name": "[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://marc.info/?l=apache-modssl\u0026m=109001100906749\u0026w=2"
            },
            {
              "name": "20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=109005001205991\u0026w=2"
            },
            {
              "name": "apache-modssl-format-string(16705)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-11T01:30Z",
      "publishedDate": "2004-07-27T04:00Z"
    }
  }
}

FKIE_CVE-2004-0700

Vulnerability from fkie_nvd - Published: 2004-07-27 04:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

References

URL	Tags
cve@mitre.org	http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857
cve@mitre.org	http://marc.info/?l=apache-modssl&m=109001100906749&w=2
cve@mitre.org	http://marc.info/?l=bugtraq&m=109005001205991&w=2
cve@mitre.org	http://packetstormsecurity.org/0407-advisories/modsslFormat.txt
cve@mitre.org	http://virulent.siyahsapka.org/
cve@mitre.org	http://www.debian.org/security/2004/dsa-532
cve@mitre.org	http://www.kb.cert.org/vuls/id/303448	Third Party Advisory, US Government Resource
cve@mitre.org	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075
cve@mitre.org	http://www.osvdb.org/7929
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2004-405.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2004-408.html
cve@mitre.org	http://www.securityfocus.com/bid/10736
cve@mitre.org	http://www.ubuntu.com/usn/usn-177-1
cve@mitre.org	https://bugzilla.fedora.us/show_bug.cgi?id=1888
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/16705
af854a3a-2127-422b-91ae-364da2661108	http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=apache-modssl&m=109001100906749&w=2
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=109005001205991&w=2
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.org/0407-advisories/modsslFormat.txt
af854a3a-2127-422b-91ae-364da2661108	http://virulent.siyahsapka.org/
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2004/dsa-532
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/303448	Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/7929
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2004-405.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2004-408.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/10736
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-177-1
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.fedora.us/show_bug.cgi?id=1888
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/16705

Impacted products

Vendor	Product	Version
mod_ssl	mod_ssl	2.3.11
mod_ssl	mod_ssl	2.4.0
mod_ssl	mod_ssl	2.4.1
mod_ssl	mod_ssl	2.4.2
mod_ssl	mod_ssl	2.4.3
mod_ssl	mod_ssl	2.4.4
mod_ssl	mod_ssl	2.4.5
mod_ssl	mod_ssl	2.4.6
mod_ssl	mod_ssl	2.4.7
mod_ssl	mod_ssl	2.4.8
mod_ssl	mod_ssl	2.4.9
mod_ssl	mod_ssl	2.4.10
mod_ssl	mod_ssl	2.5.0
mod_ssl	mod_ssl	2.5.1
mod_ssl	mod_ssl	2.6.0
mod_ssl	mod_ssl	2.6.1
mod_ssl	mod_ssl	2.6.2
mod_ssl	mod_ssl	2.6.3
mod_ssl	mod_ssl	2.6.4
mod_ssl	mod_ssl	2.6.5
mod_ssl	mod_ssl	2.6.6
mod_ssl	mod_ssl	2.7.0
mod_ssl	mod_ssl	2.7.1
mod_ssl	mod_ssl	2.8.0
mod_ssl	mod_ssl	2.8.1
mod_ssl	mod_ssl	2.8.1.2
mod_ssl	mod_ssl	2.8.2
mod_ssl	mod_ssl	2.8.3
mod_ssl	mod_ssl	2.8.4
mod_ssl	mod_ssl	2.8.5
mod_ssl	mod_ssl	2.8.5.1
mod_ssl	mod_ssl	2.8.5.2
mod_ssl	mod_ssl	2.8.6
mod_ssl	mod_ssl	2.8.7
mod_ssl	mod_ssl	2.8.8
mod_ssl	mod_ssl	2.8.9
mod_ssl	mod_ssl	2.8.10
mod_ssl	mod_ssl	2.8.12
mod_ssl	mod_ssl	2.8.14
mod_ssl	mod_ssl	2.8.15
mod_ssl	mod_ssl	2.8.16
mod_ssl	mod_ssl	2.8.17
mod_ssl	mod_ssl	2.8.18
gentoo	linux	1.4

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B29D8AB-D664-4AF1-8967-03572ECBBA38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E78D69A6-3F25-4048-8739-E8A064C5614D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0229B381-1AD6-4AEC-8B94-0D2AF77DC60A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E257E1DB-C60A-4BD4-9FE9-F3D784D30BEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FC3770C-D06D-496D-8F28-9A4036B498E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC894E0F-1CC9-43BF-8E83-673034BB0211",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABA6F650-DDBD-4A93-A4AF-73A07F362BBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3234A39B-79B9-4A41-A72F-8FD1477E21C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4A08F3D-CAB6-4F10-B7E3-6580FB2A6CA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B9C8865-9A18-4507-B9E3-48F4F19C18EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "F57A822D-E474-49B1-A262-BDA9829ED2CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "049AADD4-CBBB-4CA3-8105-D3D94649C6BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "67FCB442-61F5-42B3-849D-70638627B7CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F910BD4-B1C5-458B-9540-8F9E32C1FC7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DC707E0-4F4D-45C2-86C4-F6764668FDB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "61731D0A-2C38-4C2A-8FC0-0634D7EFA0E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "92D81C48-613B-4021-95A9-F049CDC63E23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D73CD68-2C38-4FE8-9ABE-5558E7BF135B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1B98B05-AEE6-4753-B3F3-8B09DE91985B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3061E09-41FD-4477-B8DA-AA019F63C5F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "F810E15C-61CF-40D0-9F40-12B1A65F8EAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BDE0520-8E51-4DFF-8CA2-5EF32281DD15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB888875-1AFC-4569-B783-CDE92B717882",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD6F68B8-B03D-43F9-BD40-1C30829597A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C39E94EF-FEF4-41CA-BCD5-F3273D40D0F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5778FC41-73B9-46E8-8A75-1BB09D36D081",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "08A7DE9F-3088-445E-A09A-FC8E155C4E95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "3906A1FB-3105-4248-B9D2-B915AEF90E9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1DB98C0-A15B-4186-8DAC-D906ABBEC2F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "15B615EC-D5AF-4C62-AF0A-453F7FD11DAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A56EBBAA-30C7-4872-9966-F2DA78FC4AC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "77AC8014-D4BE-498B-A684-D2C2AA9CDB41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "50211658-1959-4E97-9FF5-6ABAF3B98C36",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFC67365-5E6C-4BA2-B50F-5D6A6B3E7E72",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A320B10-6961-4A6F-BE8E-B4C1E90C0291",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "6535C201-61AE-4C2F-950F-D55C554DF4DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E038ED0-981E-4107-A0CC-59CBCF32D618",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F857736-54C2-45DF-B93C-CA8152E433A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "01DDB4D6-07E4-4EF6-BF70-363543373003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "A691D1FB-75BB-400A-994A-CFAC2C276085",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8D44D44-51B2-479E-BC44-128B4340A93E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAA93449-5248-45FB-AD18-F407BADBC500",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mod_ssl:mod_ssl:2.8.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "D680A59D-4BA8-4F9B-95E5-49F15B6A1388",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de cadena de formateo en la funci\u00f3n ssl_log en ssl_engine_log.c en mod_ssl 2.8.10 de Apache 1.3.31 puede permitir a atacantes remotos ejecutar mensajes de su elecci\u00f3n mediante especificadores de cadena de formato en ciertos mensajes de registro de HTTPS."
    }
  ],
  "id": "CVE-2004-0700",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-07-27T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000857"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=apache-modssl\u0026m=109001100906749\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=109005001205991\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://virulent.siyahsapka.org/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2004/dsa-532"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/303448"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/7929"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-405.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-408.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/10736"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-177-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=1888"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000857"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=apache-modssl\u0026m=109001100906749\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=109005001205991\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://packetstormsecurity.org/0407-advisories/modsslFormat.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://virulent.siyahsapka.org/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2004/dsa-532"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/303448"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/7929"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-405.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-408.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/10736"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-177-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=1888"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16705"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2004-0700 (GCVE-0-2004-0700)

Tags

Sightings

Nomenclature