New Search

RHSA-2008:0967 -- httpd security and bug fix update (Moderate)

oval:org.mitre.oval:def:29289

Updated httpd packages that resolve several security issues and fix a bug are now available for Red Hat Enterprise Linux 3 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the mod_proxy Apache module. An attacker in control of a Web server to which requests were being proxied could have caused a limited denial of service due to CPU consumption and stack exhaustion. (CVE-2008-2364)

Family:
unix
Status:
ACCEPTED
Platform(s):
  • CentOS Linux 3
  • CentOS Linux 5
  • Red Hat Enterprise Linux 4
  • Red Hat Enterprise Linux 3
  • Red Hat Enterprise Linux 5
Class:
patch
Reference(s):
  • RHSA-2008:0967
  • CESA-2008:0967-CentOS 5
  • CESA-2008:0967-CentOS 3
  • CVE-2008-2364
  • CVE-2008-2939
Product(s):
  • httpd