Secunia Logo
 
Mandrake update for Apache
Secunia Advisory: SA8640
Release Date: 2003-04-23
Popularity: 5,124 views

Critical:
Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

OS:Mandrake Linux 9.x

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2003-0020
CVE-2003-0083
CVE-2003-0132


Description:
MandrakeSoft has issued updated packages for Apache. These fix multiple vulnerabilities, which can be exploited to cause a DoS (Denial of Service) on a vulnerable webserver or insert escape sequences in access and error logs.

For more information:
http://secunia.com/advisories/8499/
http://secunia.com/advisories/8146/

Solution:
Upgrade automatically using MandrakeUpdate or manually by downloading the updated packages from one of MandrakeSoft's FTP server mirrors:

http://www.mandrakesecure.net/en/ftp.php


Updated packages:

-- Mandrake Linux 9.1 --

ad53df84893a5cc1114c3de55cc91658 9.1/RPMS/apache2-2.0.45-4.2mdk.i586.rpm
60d8447552d758bc3565450f08b79bfe 9.1/RPMS/apache2-common-2.0.45-4.2mdk.i586.rpm
3060613a3a072d9fffc9bbfd0a994581 9.1/RPMS/apache2-devel-2.0.45-4.2mdk.i586.rpm
36504391b61565e9607a70c2d42a3b6a 9.1/RPMS/apache2-manual-2.0.45-4.2mdk.i586.rpm
b1778fe2310da4c8c94fcdefb6856ccd 9.1/RPMS/apache2-mod_dav-2.0.45-4.2mdk.i586.rpm
f7b614162bad34d2778b8621d7878641 9.1/RPMS/apache2-mod_ldap-2.0.45-4.2mdk.i586.rpm
e8c3e2db532f8c2c94b5ef05bab0ce85 9.1/RPMS/apache2-mod_ssl-2.0.45-4.2mdk.i586.rpm
2f56e31ce758a96a1c9fd8060eba4d1a 9.1/RPMS/apache2-modules-2.0.45-4.2mdk.i586.rpm
69029f8e2bda1254c6f469df9eace7f7 9.1/RPMS/apache2-source-2.0.45-4.2mdk.i586.rpm
43999a817273e73e901f8bf8ff05389f 9.1/RPMS/libapr0-2.0.45-4.2mdk.i586.rpm
ab454d8e8e1d9c3f51a98ad2aaa4cffc 9.1/SRPMS/apache-conf-2.0.45-2.1mdk.src.rpm
c11d11afb80fba23925632089a70bc00 9.1/SRPMS/apache2-2.0.45-4.2mdk.src.rpm

PPC:
b9db2f91c7937244acb2d32f34ae9241 ppc/9.1/RPMS/apache2-2.0.45-4.2mdk.ppc.rpm
3bc96cd24d6bd3b307222d81fce9f4ca ppc/9.1/RPMS/apache2-common-2.0.45-4.2mdk.ppc.rpm
60e4187ec0b293f25a9008c13c527c1a ppc/9.1/RPMS/apache2-devel-2.0.45-4.2mdk.ppc.rpm
a3c3322b834790fc1da3c8e7f0901168 ppc/9.1/RPMS/apache2-manual-2.0.45-4.2mdk.ppc.rpm
352b82414ec0362eaa9c7ea451261a60 ppc/9.1/RPMS/apache2-mod_dav-2.0.45-4.2mdk.ppc.rpm
a537dc5489a82099cb87b24f3718e11c ppc/9.1/RPMS/apache2-mod_ldap-2.0.45-4.2mdk.ppc.rpm
e6736e2c450bc76382cceaf7116e1616 ppc/9.1/RPMS/apache2-mod_ssl-2.0.45-4.2mdk.ppc.rpm
f5b6f2d90cb73845987624c7ffd514a3 ppc/9.1/RPMS/apache2-modules-2.0.45-4.2mdk.ppc.rpm
dca30abc0adead3a22c5fd3a82df8d20 ppc/9.1/RPMS/apache2-source-2.0.45-4.2mdk.ppc.rpm
f33cdee67bd82884bd6d77c551320961 ppc/9.1/RPMS/libapr0-2.0.45-4.2mdk.ppc.rpm
ab454d8e8e1d9c3f51a98ad2aaa4cffc ppc/9.1/SRPMS/apache-conf-2.0.45-2.1mdk.src.rpm
c11d11afb80fba23925632089a70bc00 ppc/9.1/SRPMS/apache2-2.0.45-4.2mdk.src.rpm


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. ClamAV "cli_check_jpeg_exploit()" Denial of Service Vulnerability // 55 views
2. Linksys WRT160N Cross-Site Scripting Vulnerability // 47 views
3. IBM Rational ClearCase Cross-Site Scripting Vulnerability // 43 views
4. Sun Java JDK / JRE Multiple Vulnerabilities // 42 views
5. IBM Rational ClearQuest Multiple Vulnerabilities // 42 views
6. Mozilla Firefox 3 Multiple Vulnerabilities // 39 views
7. Debian update for flamethrower // 38 views
8. ASP Portal "ASPPortal.mdb" Database Disclosure Security Issue // 37 views
9. DAHDI "ZT_SPANCONFIG" IOCTL Privilege Escalation Vulnerability // 37 views
10. flamethrower Insecure Temporary Files // 36 views