7.8 - HPSBOV02822 SSRT100966

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	HP Secure Web Server (SWS) for OpenVMS, Remote Denial of Service (DoS), Unauthorized Access, Disclosure of Information

Informations
Name	HPSBOV02822 SSRT100966	First vendor Publication	2012-10-08
Vendor	HP	Last vendor Modification	2012-10-08
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Potential vulnerabilities have been identified with HP Secure Web Server (SWS) for OpenVMS. The vulnerabilities could be remotely exploited to create a Denial of Service (DoS), unauthorized access, or unauthorized disclosure of information.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03517954

CWE : Common Weakness Enumeration

%	Id	Name
33 %	CWE-20	Improper Input Validation
17 %	CWE-770	Allocation of Resources Without Limits or Throttling
17 %	CWE-400	Uncontrolled Resource Consumption ('Resource Exhaustion')
17 %	CWE-399	Resource Management Errors
17 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12951

Oval ID:	oval:org.mitre.oval:def:12951
Title:	DSA-2237-1 apr -- denial of service
Description:	A flaw was found in the APR library, which could be exploited through Apache HTTPD's mod_autoindex. If a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.
Family:	unix	Class:	patch
Reference(s):	DSA-2237-1 CVE-2011-0419	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apr
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apr DPKG is earlier than 1.2.12-5+lenny3 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apr DPKG is earlier than 1.4.2-6+squeeze1

Definition Id: oval:org.mitre.oval:def:13067

Oval ID:	oval:org.mitre.oval:def:13067
Title:	DSA-2237-2 apr -- denial of service
Description:	The recent APR update DSA-2237-1 introduced a regression that could lead to an endless loop in the apr_fnmatch function, causing a denial of service. This update fixes this problem. For reference, the description of the original DSA, which fixed CVE-2011-0419: A flaw was found in the APR library, which could be exploited through Apache HTTPD's mod_autoindex. If a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.
Family:	unix	Class:	patch
Reference(s):	DSA-2237-2 CVE-2011-0419	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apr
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apr DPKG is earlier than 1.2.12-5+lenny4 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apr DPKG is earlier than 1.4.2-6+squeeze2

Definition Id: oval:org.mitre.oval:def:13078

Oval ID:	oval:org.mitre.oval:def:13078
Title:	USN-1134-1 -- apache2, apr vulnerabilities
Description:	apr: The Apache Portable Runtime Library - apache2: a scalable, extensible web server A denial of service issue exists that affects the Apache web server.
Family:	unix	Class:	patch
Reference(s):	USN-1134-1 CVE-2011-0419 CVE-2011-1928	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 6.06 Ubuntu 10.04	Product(s):	apache2 apr
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Installed architecture is all AND libapr1 DPKG is earlier than 1.2.11-1ubuntu0.2 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND libapr1 DPKG is earlier than 1.4.2-3ubuntu1.1 OR Release section Ubuntu 6.06 is installed AND Installed architecture is all AND libapr0 DPKG is earlier than 2.0.55-4ubuntu2.13 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND libapr1 DPKG is earlier than 1.3.8-1ubuntu0.3

Definition Id: oval:org.mitre.oval:def:14638

Oval ID:	oval:org.mitre.oval:def:14638
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0419	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02702 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09 OR Criteria meets HP Security Bulletin HPSBUX02702 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.02 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.02 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.02

Definition Id: oval:org.mitre.oval:def:14762

Oval ID:	oval:org.mitre.oval:def:14762
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02702 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09 OR Criteria meets HP Security Bulletin HPSBUX02702 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.02 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.02 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.02

Definition Id: oval:org.mitre.oval:def:14804

Oval ID:	oval:org.mitre.oval:def:14804
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0419	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09

Definition Id: oval:org.mitre.oval:def:14824

Oval ID:	oval:org.mitre.oval:def:14824
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09

Definition Id: oval:org.mitre.oval:def:15135

Oval ID:	oval:org.mitre.oval:def:15135
Title:	DSA-2298-2 apache2 -- denial of service
Description:	The apache2 Upgrade from DSA-2298-1 has caused a regression that prevented some video players from seeking in video files served by Apache HTTPD. This update fixes this bug. The text of the original advisory is reproduced for reference: Two issues have been found in the Apache HTTPD web server: CVE-2011-3192 A vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server. This vulnerability allows an attacker to cause Apache HTTPD to use an excessive amount of memory, causing a denial of service. CVE-2010-1452 A vulnerability has been found in mod_dav that allows an attacker to cause a daemon crash, causing a denial of service. This issue only affects the Debian 5.0 oldstable/lenny distribution. The regression has been fixed in the following packages: For the oldstable distribution, this problem has been fixed in version 2.2.9-10+lenny11. For the stable distribution, this problem has been fixed in version 2.2.16-6+squeeze3. For the testing distribution, this problem will be fixed in version 2.2.20-1. For the unstable distribution, this problem has been fixed in version 2.2.20-1. We recommend that you upgrade your apache2 packages. This update also contains updated apache2-mpm-itk packages which have been recompiled against the updated apache2 packages. The new version number
Family:	unix	Class:	patch
Reference(s):	DSA-2298-2 CVE-2010-1452 CVE-2011-3192	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny11 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.16-6+squeeze3

Definition Id: oval:org.mitre.oval:def:15145

Oval ID:	oval:org.mitre.oval:def:15145
Title:	DSA-2298-1 apache2 -- denial of service
Description:	Two issues have been found in the Apache HTTPD web server: CVE-2011-3192 A vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server. This vulnerability allows an attacker to cause Apache HTTPD to use an excessive amount of memory, causing a denial of service. CVE-2010-1452 A vulnerability has been found in mod_dav that allows an attacker to cause a daemon crash, causing a denial of service. This issue only affects the Debian 5.0 oldstable/lenny distribution. For the oldstable distribution, these problems have been fixed in version 2.2.9-10+lenny10. For the stable distribution, this problem has been fixed in version 2.2.16-6+squeeze2. For the testing distribution, this problem will be fixed soon. For the unstable distribution, this problem has been fixed in version 2.2.19-2. We recommend that you upgrade your apache2 packages. This update also contains updated apache2-mpm-itk packages which have been recompiled against the updated apache2 packages. The new version number
Family:	unix	Class:	patch
Reference(s):	DSA-2298-1 CVE-2010-1452 CVE-2011-3192	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny10 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.16-6+squeeze2

Definition Id: oval:org.mitre.oval:def:15347

Oval ID:	oval:org.mitre.oval:def:15347
Title:	USN-1199-1 -- Apache vulnerability
Description:	apache2: Apache HTTP server A remote attacker could send crafted input to Apache and cause it to crash.
Family:	unix	Class:	patch
Reference(s):	USN-1199-1 CVE-2011-3192	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 8.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	Apache
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.17-1ubuntu1.2 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND Packages section apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.21 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.6 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.16-1ubuntu3.3

Definition Id: oval:org.mitre.oval:def:18827

Oval ID:	oval:org.mitre.oval:def:18827
Title:	Apache HTTP vulnerability 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 in VisualSVN Server (CVE-2011-3192)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed Check the version of Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 in VisualSVN Server Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP Server version is greater than or equals to 1.3.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than or equals to 1.3.68 in VisualSVN Server AND Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP Server version is greater than or equals to 2.0.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than 2.0.65 in VisualSVN Server AND Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP version is greater than or equals to 2.2.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than 2.2.20 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19686

Oval ID:	oval:org.mitre.oval:def:19686
Title:	HP-UX Running Apache, Remote Denial of Service (DoS), Local Increase of Privilege
Description:	Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3607	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02761 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.12 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.12 OR Criteria meets HP Security Bulletin HPSBUX02761 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.03 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.03

Definition Id: oval:org.mitre.oval:def:19739

Oval ID:	oval:org.mitre.oval:def:19739
Title:	HP-UX Running Apache, Remote Denial of Service (DoS), Local Increase of Privilege
Description:	scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0031	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02761 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.12 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.12 OR Criteria meets HP Security Bulletin HPSBUX02761 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.03 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.03

Definition Id: oval:org.mitre.oval:def:19767

Oval ID:	oval:org.mitre.oval:def:19767
Title:	CRITICAL PATCH UPDATE JULY 2012
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0419	Version:	3
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Patch 147713-01 or later installed Solaris 10 (SPARC) is installed AND NOT Patch 147713-01 or later installed OR Patch 147714-01 or later installed Solaris 10 (x86) is installed AND NOT Patch 147714-01 or later installed

Definition Id: oval:org.mitre.oval:def:21452

Oval ID:	oval:org.mitre.oval:def:21452
Title:	RHSA-2011:1391: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1391-01 CVE-2011-3348 CVE-2011-3368	Version:	29
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	httpd
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section httpd-devel is earlier than 0:2.2.15-9.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.3 AND httpd is earlier than 0:2.2.15-9.el6_1.3

Definition Id: oval:org.mitre.oval:def:21500

Oval ID:	oval:org.mitre.oval:def:21500
Title:	RHSA-2011:0507: apr security update (Moderate)
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0507-01 CESA-2011:0507 CVE-2011-0419	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	apr
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section apr-devel is earlier than 0:1.2.7-11.el5_6.4 AND apr-docs is earlier than 0:1.2.7-11.el5_6.4 AND apr is earlier than 0:1.2.7-11.el5_6.4 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section apr-devel is earlier than 0:1.3.9-3.el6_0.1 AND apr is earlier than 0:1.3.9-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:21940

Oval ID:	oval:org.mitre.oval:def:21940
Title:	RHSA-2011:0844: apr security update (Low)
Description:	The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0844-01 CESA-2011:0844 CVE-2011-1928	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	apr
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section apr-devel is earlier than 0:1.2.7-11.el5_6.5 AND apr-docs is earlier than 0:1.2.7-11.el5_6.5 AND apr is earlier than 0:1.2.7-11.el5_6.5 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section apr-devel is earlier than 0:1.3.9-3.el6_1.2 AND apr is earlier than 0:1.3.9-3.el6_1.2

Definition Id: oval:org.mitre.oval:def:22002

Oval ID:	oval:org.mitre.oval:def:22002
Title:	RHSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1245-01 CVE-2011-3192	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	httpd
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

Definition Id: oval:org.mitre.oval:def:22123

Oval ID:	oval:org.mitre.oval:def:22123
Title:	RHSA-2011:1392: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1392-01 CESA-2011:1392 CVE-2011-3368	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	httpd
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section httpd-manual is earlier than 0:2.2.3-53.el5_7.3 AND httpd-devel is earlier than 0:2.2.3-53.el5_7.3 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.3 AND httpd is earlier than 0:2.2.3-53.el5_7.3

Definition Id: oval:org.mitre.oval:def:22855

Oval ID:	oval:org.mitre.oval:def:22855
Title:	DEPRECATED: ELSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1245-01 CVE-2011-3192	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

Definition Id: oval:org.mitre.oval:def:23204

Oval ID:	oval:org.mitre.oval:def:23204
Title:	DEPRECATED: ELSA-2011:0507: apr security update (Moderate)
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0507-01 CVE-2011-0419	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	apr
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test apr-devel is earlier than 0:1.2.7-11.el5_6.4 AND apr-docs is earlier than 0:1.2.7-11.el5_6.4 AND apr is earlier than 0:1.2.7-11.el5_6.4 OR rpm test Oracle Linux 6.x AND rpm test apr-devel is earlier than 0:1.3.9-3.el6_0.1 AND apr is earlier than 0:1.3.9-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:23246

Oval ID:	oval:org.mitre.oval:def:23246
Title:	DEPRECATED: ELSA-2011:0844: apr security update (Low)
Description:	The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0844-01 CVE-2011-1928	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	apr
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test apr-devel is earlier than 0:1.2.7-11.el5_6.5 AND apr-docs is earlier than 0:1.2.7-11.el5_6.5 AND apr is earlier than 0:1.2.7-11.el5_6.5 OR rpm test Oracle Linux 6.x AND rpm test apr-devel is earlier than 0:1.3.9-3.el6_1.2 AND apr is earlier than 0:1.3.9-3.el6_1.2

Definition Id: oval:org.mitre.oval:def:23276

Oval ID:	oval:org.mitre.oval:def:23276
Title:	ELSA-2011:1392: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1392-01 CVE-2011-3368	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	httpd
Definition Synopsis:
Oracle Linux 5.x rpm test httpd-manual is earlier than 0:2.2.3-53.el5_7.3 AND httpd-devel is earlier than 0:2.2.3-53.el5_7.3 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.3 AND httpd is earlier than 0:2.2.3-53.el5_7.3

Definition Id: oval:org.mitre.oval:def:23476

Oval ID:	oval:org.mitre.oval:def:23476
Title:	ELSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1245-01 CVE-2011-3192	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

Definition Id: oval:org.mitre.oval:def:23571

Oval ID:	oval:org.mitre.oval:def:23571
Title:	ELSA-2011:0507: apr security update (Moderate)
Description:	Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0507-01 CVE-2011-0419	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	apr
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test apr-devel is earlier than 0:1.2.7-11.el5_6.4 AND apr-docs is earlier than 0:1.2.7-11.el5_6.4 AND apr is earlier than 0:1.2.7-11.el5_6.4 OR rpm test Oracle Linux 6.x AND rpm test apr-devel is earlier than 0:1.3.9-3.el6_0.1 AND apr is earlier than 0:1.3.9-3.el6_0.1

Definition Id: oval:org.mitre.oval:def:23607

Oval ID:	oval:org.mitre.oval:def:23607
Title:	ELSA-2011:0844: apr security update (Low)
Description:	The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0844-01 CVE-2011-1928	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	apr
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test apr-devel is earlier than 0:1.2.7-11.el5_6.5 AND apr-docs is earlier than 0:1.2.7-11.el5_6.5 AND apr is earlier than 0:1.2.7-11.el5_6.5 OR rpm test Oracle Linux 6.x AND rpm test apr-devel is earlier than 0:1.3.9-3.el6_1.2 AND apr is earlier than 0:1.3.9-3.el6_1.2

Definition Id: oval:org.mitre.oval:def:23761

Oval ID:	oval:org.mitre.oval:def:23761
Title:	ELSA-2011:1391: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1391-01 CVE-2011-3348 CVE-2011-3368	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
Oracle Linux 6.x rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.3 AND httpd is earlier than 0:2.2.15-9.el6_1.3

Definition Id: oval:org.mitre.oval:def:28122

Oval ID:	oval:org.mitre.oval:def:28122
Title:	DEPRECATED: ELSA-2011-1391 -- httpd security and bug fix update (moderate)
Description:	[2.2.15-9.0.1.el6_1.3] - replace index.html with Oracle's index page - update vstring in specfile [2.2.15-9.3] - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901) - fix regressions in CVE-2011-3192 patch (#736592)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1391 CVE-2011-3348 CVE-2011-3368	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
Oracle Linux 6.x Packages match section httpd is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-devel is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.0.1.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.0.1.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.0.1.el6_1.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Apr-Util cpe:2.3:a:apache:apr-util:1.4.4:::::::* cpe:2.3:a:apache:apr-util:1.4.3:::::::*	2
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.7:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.5:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.3::windows::::: cpe:2.3:a:apache:http_server:2.2.21:::::::* cpe:2.3:a:apache:http_server:2.2.20:::::::* cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.2::windows::::: cpe:2.3:a:apache:http_server:2.2.19:::::::* cpe:2.3:a:apache:http_server:2.2.18:::::::* cpe:2.3:a:apache:http_server:2.2.17:::::::* cpe:2.3:a:apache:http_server:2.2.16:::::::* cpe:2.3:a:apache:http_server:2.2.15-60:::::::* cpe:2.3:a:apache:http_server:2.2.15:::::::* cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.2:::::::* cpe:2.3:a:apache:http_server:2.1.9:::::::* cpe:2.3:a:apache:http_server:2.1.8:::::::* cpe:2.3:a:apache:http_server:2.1.7:::::::* cpe:2.3:a:apache:http_server:2.1.6:::::::* cpe:2.3:a:apache:http_server:2.1.5:::::::* cpe:2.3:a:apache:http_server:2.1.4:::::::* cpe:2.3:a:apache:http_server:2.1.3:::::::* cpe:2.3:a:apache:http_server:2.1.2:::::::* cpe:2.3:a:apache:http_server:2.1.1:::::::* cpe:2.3:a:apache:http_server:2.1.0:::::::* cpe:2.3:a:apache:http_server:2.1:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.65:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.58::win32::::: cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.46::win32::::: cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.34:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.34:::::::* cpe:2.3:a:apache:http_server:2.0.33:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.31:::::::* cpe:2.3:a:apache:http_server:2.0.30:::::::* cpe:2.3:a:apache:http_server:2.0.29:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.27:::::::* cpe:2.3:a:apache:http_server:2.0.26:::::::* cpe:2.3:a:apache:http_server:2.0.25:::::::* cpe:2.3:a:apache:http_server:2.0.24:::::::* cpe:2.3:a:apache:http_server:2.0.23:::::::* cpe:2.3:a:apache:http_server:2.0.22:::::::* cpe:2.3:a:apache:http_server:2.0.21:::::::* cpe:2.3:a:apache:http_server:2.0.20:::::::* cpe:2.3:a:apache:http_server:2.0.19:::::::* cpe:2.3:a:apache:http_server:2.0.18:::::::* cpe:2.3:a:apache:http_server:2.0.17:::::::* cpe:2.3:a:apache:http_server:2.0.16:::::::* cpe:2.3:a:apache:http_server:2.0.15:::::::* cpe:2.3:a:apache:http_server:2.0.14:::::::* cpe:2.3:a:apache:http_server:2.0.13:::::::* cpe:2.3:a:apache:http_server:2.0.12:::::::* cpe:2.3:a:apache:http_server:2.0.11:::::::* cpe:2.3:a:apache:http_server:2.0.0:::::::* cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:2.0:alpha9:::::: cpe:2.3:a:apache:http_server:1.99:::::::* cpe:2.3:a:apache:http_server:1.4.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.9::win32::::: cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.7::dev::::: cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.6::win32::::: cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.40:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.26::win32::::: cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.25::win32::::: cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.24::win32::::: cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.23::win32::::: cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.22::win32::::: cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.20::win32::::: cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.19::win32::::: cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.18::win32::::: cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.17::win32::::: cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.16::win32::::: cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.15::win32::::: cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.14::win32::::: cpe:2.3:a:apache:http_server:1.3.14::mac_os::::: cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.13::win32::::: cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.12::win32::::: cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.11::win32::::: cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::* cpe:2.3:a:apache:http_server:1.2.9:::::::* cpe:2.3:a:apache:http_server:1.2.6:::::::* cpe:2.3:a:apache:http_server:1.2.5:::::::* cpe:2.3:a:apache:http_server:1.2.4:::::::* cpe:2.3:a:apache:http_server:1.2.0:::::::* cpe:2.3:a:apache:http_server:1.15.17:::::::* cpe:2.3:a:apache:http_server:1.1.1:::::::* cpe:2.3:a:apache:http_server:1.1:::::::* cpe:2.3:a:apache:http_server:1.0.5:::::::* cpe:2.3:a:apache:http_server:1.0.3:::::::* cpe:2.3:a:apache:http_server:1.0.2:::::::* cpe:2.3:a:apache:http_server:1.0:::::::* cpe:2.3:a:apache:http_server:0.8.14:::::::* cpe:2.3:a:apache:http_server:0.8.11:::::::* cpe:2.3:a:apache:http_server:::::::: cpe:2.3:a:apache:http_server:::win32:::::* cpe:2.3:a:apache:http_server:-:::::::*	187
Application	Apache Portable Runtime cpe:2.3:a:apache:portable_runtime:1.4.2:::::::* cpe:2.3:a:apache:portable_runtime:1.4.1:::::::* cpe:2.3:a:apache:portable_runtime:1.4.0:::::::* cpe:2.3:a:apache:portable_runtime:1.3.9:::::::* cpe:2.3:a:apache:portable_runtime:1.3.8:::::::* cpe:2.3:a:apache:portable_runtime:1.3.7:::::::* cpe:2.3:a:apache:portable_runtime:1.3.6-dev:::::::* cpe:2.3:a:apache:portable_runtime:1.3.6:::::::* cpe:2.3:a:apache:portable_runtime:1.3.5:::::::* cpe:2.3:a:apache:portable_runtime:1.3.4-dev:::::::* cpe:2.3:a:apache:portable_runtime:1.3.4:::::::* cpe:2.3:a:apache:portable_runtime:1.3.3:::::::* cpe:2.3:a:apache:portable_runtime:1.3.2:::::::* cpe:2.3:a:apache:portable_runtime:1.3.13:::::::* cpe:2.3:a:apache:portable_runtime:1.3.12:::::::* cpe:2.3:a:apache:portable_runtime:1.3.11:::::::* cpe:2.3:a:apache:portable_runtime:1.3.10:::::::* cpe:2.3:a:apache:portable_runtime:1.3.1:::::::* cpe:2.3:a:apache:portable_runtime:1.3.0:::::::* cpe:2.3:a:apache:portable_runtime:0.9.9:::::::* cpe:2.3:a:apache:portable_runtime:0.9.8:::::::* cpe:2.3:a:apache:portable_runtime:0.9.7-dev:::::::* cpe:2.3:a:apache:portable_runtime:0.9.7:::::::* cpe:2.3:a:apache:portable_runtime:0.9.6:::::::* cpe:2.3:a:apache:portable_runtime:0.9.5:::::::* cpe:2.3:a:apache:portable_runtime:0.9.4:::::::* cpe:2.3:a:apache:portable_runtime:0.9.3-dev:::::::* cpe:2.3:a:apache:portable_runtime:0.9.3:::::::* cpe:2.3:a:apache:portable_runtime:0.9.2-dev:::::::* cpe:2.3:a:apache:portable_runtime:0.9.2:::::::* cpe:2.3:a:apache:portable_runtime:0.9.16-dev:::::::* cpe:2.3:a:apache:portable_runtime:0.9.1:::::::* cpe:2.3:a:apache:portable_runtime::::::::	33
Application	Redhat Storage cpe:2.3:a:redhat:storage:2.0:::::::*	1
Os	Apple Mac Os X cpe:2.3:o:apple:mac_os_x:10.6.0:::::::*	1
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:11.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::-:::	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	3
Os	Freebsd cpe:2.3:o:freebsd:freebsd::::::::	1
Os	Google Android cpe:2.3:o:google:android::::::::	1
Os	Netbsd cpe:2.3:o:netbsd:netbsd:5.1:::::::*	1
Os	Openbsd cpe:2.3:o:openbsd:openbsd:4.8:::::::*	1
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::*	2
Os	Oracle Solaris cpe:2.3:o:oracle:solaris:10:::::::*	1
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*	1
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:6.2:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*	1
Os	Redhat Enterprise Linux Server Aus cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:::::::*	1
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*	1
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp1::::vmware::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp2:::-:::*	5
Os	Suse Linux Enterprise Software Development Kit cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3::::::	3

ExploitDB Exploits

id	Description
2011-12-09	Apache HTTP Server Denial of Service
2011-10-11	Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

OpenVAS Exploits

Date	Description
2012-09-25	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004) File : nvt/gb_macosx_su12-004.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-133-01 apr/apr-util File : nvt/esoft_slk_ssa_2011_133_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-145-01 apr/apr-util File : nvt/esoft_slk_ssa_2011_145_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-252-01 httpd File : nvt/esoft_slk_ssa_2011_252_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-284-01 httpd File : nvt/esoft_slk_ssa_2011_284_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2012-041-01 httpd File : nvt/esoft_slk_ssa_2012_041_01.nasl
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-25 (apache) File : nvt/glsa_201206_25.nasl
2012-08-02	Name : SuSE Update for apache2 openSUSE-SU-2012:0314-1 (apache2) File : nvt/gb_suse_2012_0314_1.nasl
2012-07-30	Name : CentOS Update for apr CESA-2011:0844 centos5 x86_64 File : nvt/gb_CESA-2011_0844_apr_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2012:0128 centos6 File : nvt/gb_CESA-2012_0128_httpd_centos6.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos5 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos4 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1245 centos4 x86_64 File : nvt/gb_CESA-2011_1245_httpd_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for apr CESA-2011:0844 centos4 x86_64 File : nvt/gb_CESA-2011_0844_apr_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for apr CESA-2011:0507 centos5 x86_64 File : nvt/gb_CESA-2011_0507_apr_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for apr CESA-2011:0507 centos4 x86_64 File : nvt/gb_CESA-2011_0507_apr_centos4_x86_64.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2012:0128-01 File : nvt/gb_RHSA-2012_0128-01_httpd.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2011:1391-01 File : nvt/gb_RHSA-2011_1391-01_httpd.nasl
2012-04-02	Name : Fedora Update for httpd FEDORA-2012-1598 File : nvt/gb_fedora_2012_1598_httpd_fc16.nasl
2012-04-02	Name : Fedora Update for httpd FEDORA-2011-12667 File : nvt/gb_fedora_2011_12667_httpd_fc16.nasl
2012-03-07	Name : Fedora Update for httpd FEDORA-2012-1642 File : nvt/gb_fedora_2012_1642_httpd_fc15.nasl
2012-03-07	Name : Fedora Update for apr FEDORA-2012-1656 File : nvt/gb_fedora_2012_1656_apr_fc15.nasl
2012-02-27	Name : RedHat Update for httpd RHSA-2012:0323-01 File : nvt/gb_RHSA-2012_0323-01_httpd.nasl
2012-02-21	Name : Ubuntu Update for apache2 USN-1368-1 File : nvt/gb_ubuntu_USN_1368_1.nasl
2012-02-13	Name : Debian Security Advisory DSA 2405-1 (apache2) File : nvt/deb_2405_1.nasl
2012-02-12	Name : FreeBSD Ports: apache File : nvt/freebsd_apache20.nasl
2012-02-03	Name : Mandriva Update for apache MDVSA-2012:012 (apache) File : nvt/gb_mandriva_MDVSA_2012_012.nasl
2012-01-13	Name : Mandriva Update for apache MDVSA-2012:003 (apache) File : nvt/gb_mandriva_MDVSA_2012_003.nasl
2011-11-15	Name : CA Gateway Security Remote Code Execution Vulnerability File : nvt/gb_ca_gateway_security_remote_code_execution_vuln.nasl
2011-11-11	Name : CentOS Update for httpd CESA-2011:1392 centos4 i386 File : nvt/gb_CESA-2011_1392_httpd_centos4_i386.nasl
2011-11-11	Name : Mandriva Update for apache MDVSA-2011:168 (apache) File : nvt/gb_mandriva_MDVSA_2011_168.nasl
2011-11-11	Name : Ubuntu Update for apache2 USN-1259-1 File : nvt/gb_ubuntu_USN_1259_1.nasl
2011-10-21	Name : CentOS Update for httpd CESA-2011:1392 centos5 i386 File : nvt/gb_CESA-2011_1392_httpd_centos5_i386.nasl
2011-10-21	Name : RedHat Update for httpd RHSA-2011:1392-01 File : nvt/gb_RHSA-2011_1392-01_httpd.nasl
2011-10-20	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006) File : nvt/gb_macosx_su11-006.nasl
2011-10-10	Name : Mandriva Update for apache MDVSA-2011:144 (apache) File : nvt/gb_mandriva_MDVSA_2011_144.nasl
2011-09-21	Name : FreeBSD Ports: apache, apache-event, apache-itk, apache-peruser, apache-worker File : nvt/freebsd_apache18.nasl
2011-09-21	Name : Debian Security Advisory DSA 2298-2 (apache2) File : nvt/deb_2298_2.nasl
2011-09-21	Name : Debian Security Advisory DSA 2298-1 (apache2) File : nvt/deb_2298_1.nasl
2011-09-16	Name : Fedora Update for httpd FEDORA-2011-12715 File : nvt/gb_fedora_2011_12715_httpd_fc15.nasl
2011-09-16	Name : RedHat Update for httpd RHSA-2011:1294-01 File : nvt/gb_RHSA-2011_1294-01_httpd.nasl
2011-09-07	Name : Mandriva Update for apache MDVSA-2011:130 (apache) File : nvt/gb_mandriva_MDVSA_2011_130.nasl
2011-09-07	Name : RedHat Update for httpd RHSA-2011:1245-01 File : nvt/gb_RHSA-2011_1245-01_httpd.nasl
2011-09-07	Name : CentOS Update for httpd CESA-2011:1245 centos4 i386 File : nvt/gb_CESA-2011_1245_httpd_centos4_i386.nasl
2011-09-07	Name : Ubuntu Update for apache2 USN-1199-1 File : nvt/gb_ubuntu_USN_1199_1.nasl
2011-08-26	Name : Apache httpd Web Server Range Header Denial of Service Vulnerability File : nvt/secpod_apache_http_srv_range_header_dos_vuln.nasl
2011-08-09	Name : CentOS Update for apr CESA-2011:0507 centos4 i386 File : nvt/gb_CESA-2011_0507_apr_centos4_i386.nasl
2011-08-09	Name : CentOS Update for apr CESA-2011:0507 centos5 i386 File : nvt/gb_CESA-2011_0507_apr_centos5_i386.nasl
2011-08-09	Name : CentOS Update for apr CESA-2011:0844 centos5 i386 File : nvt/gb_CESA-2011_0844_apr_centos5_i386.nasl
2011-08-03	Name : Debian Security Advisory DSA 2237-1 (apr) File : nvt/deb_2237_1.nasl
2011-08-03	Name : Debian Security Advisory DSA 2237-2 (apr) File : nvt/deb_2237_2.nasl
2011-08-03	Name : FreeBSD Ports: apr1 File : nvt/freebsd_apr1.nasl
2011-08-03	Name : FreeBSD Ports: apr1 File : nvt/freebsd_apr10.nasl
2011-07-12	Name : Fedora Update for apr FEDORA-2011-6750 File : nvt/gb_fedora_2011_6750_apr_fc15.nasl
2011-06-06	Name : CentOS Update for apr CESA-2011:0844 centos4 i386 File : nvt/gb_CESA-2011_0844_apr_centos4_i386.nasl
2011-06-06	Name : Fedora Update for apr FEDORA-2011-7340 File : nvt/gb_fedora_2011_7340_apr_fc13.nasl
2011-06-06	Name : RedHat Update for apr RHSA-2011:0844-01 File : nvt/gb_RHSA-2011_0844-01_apr.nasl
2011-06-06	Name : Fedora Update for apr FEDORA-2011-6918 File : nvt/gb_fedora_2011_6918_apr_fc14.nasl
2011-06-03	Name : Mandriva Update for apr MDVSA-2011:095-1 (apr) File : nvt/gb_mandriva_MDVSA_2011_095_1.nasl
2011-06-03	Name : Ubuntu Update for apr USN-1134-1 File : nvt/gb_ubuntu_USN_1134_1.nasl
2011-05-23	Name : Mandriva Update for apr MDVSA-2011:095 (apr) File : nvt/gb_mandriva_MDVSA_2011_095.nasl
2011-05-17	Name : RedHat Update for apr RHSA-2011:0507-01 File : nvt/gb_RHSA-2011_0507-01_apr.nasl
2011-05-17	Name : Mandriva Update for apr MDVSA-2011:084 (apr) File : nvt/gb_mandriva_MDVSA_2011_084.nasl
0000-00-00	Name : FreeBSD Ports: apr0 File : nvt/freebsd_apr00.nasl
0000-00-00	Name : FreeBSD Ports: apache File : nvt/freebsd_apache19.nasl
0000-00-00	Name : Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerabi... File : nvt/gb_apache_49957.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
78293	Apache HTTP Server Scoreboard Invalid Free Operation Local Security Bypass
77310	Apache HTTP Server mod_proxy Reverse Proxy Mode Security Bypass Weakness (201...
76744	Apache HTTP Server server/utils.c ap_pregsub() Function htaccess File Handlin...
76079	Apache HTTP Server mod_proxy Mdule Web Request URL Parsing Proxy Remote Secur...
74721	Apache HTTP Server ByteRange Filter Memory Exhaustion Remote DoS A denial of service vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server prior to version 2.2.20: http://seclists.org/fulldisclosure/2011/Aug/175 An attack tool is circulating in the wild. Active use of this tool has been observed. The attack can be done remotely and with a modest number of requests can cause very significant memory and CPU usage on the server. The default Apache httpd installations version 2.0 prior to 2.0.65 and version 2.2 prior to 2.2.20 are vulnerable. Apache 2.2.20 does fix this issue; however with a number of side effects (see release notes). Version 2.2.21 corrects a protocol defect in 2.2.20, and also introduces the MaxRanges directive. Version 2.0.65 includes fix for this vulnerability. Apache 1.3 is NOT vulnerable. However as explained in the background section in more detail - this attack does cause a significant and possibly unexpected load. You are advised to review your configuration in that light.
73388	Multiple Vendor libc Implentation fnmatch.c Memory Consumption DoS
73383	Apache HTTP Server Portable Runtime (APR) Library apr_fnmatch() Infinite Loop...

Information Assurance Vulnerability Management (IAVM)

Date	Description
2011-06-02	IAVM : 2011-B-0060 - Apache Portable Runtime Denial of Service Vulnerability Severity : Category II - VMSKEY : V0027639

Snort® IPS/IDS

Date	Description
2014-01-10	Apache server mod_proxy reverse proxy bypass attempt RuleID : 21214 - Revision : 11 - Type : SERVER-APACHE
2014-01-10	Apache server mod_proxy reverse proxy exposure attempt RuleID : 20580 - Revision : 2 - Type : WEB-MISC
2014-01-10	Apache mod_proxy reverse proxy information disclosure attempt RuleID : 20528 - Revision : 13 - Type : SERVER-APACHE
2014-01-10	Apache Killer denial of service tool exploit attempt RuleID : 19825 - Revision : 13 - Type : SERVER-APACHE
2014-01-10	Apache APR apr_fn match infinite loop denial of service attempt RuleID : 19709 - Revision : 4 - Type : SERVER-APACHE

Nessus® Vulnerability Scanner

Date	Description
2015-07-24	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16907.nasl - Type : ACT_GATHER_INFO
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2013-0469-1.nasl - Type : ACT_GATHER_INFO
2015-01-27	Name : The remote web server is affected by multiple vulnerabilities. File : oracle_http_server_cpu_jan_2015.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_apache_20120420.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote device is affected by multiple vulnerabilities. File : juniper_space_jsa10585.nasl - Type : ACT_GATHER_INFO
2014-12-19	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15920.nasl - Type : ACT_GATHER_INFO
2014-12-16	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-770.nasl - Type : ACT_GATHER_INFO
2014-12-05	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15889.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0542.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-1.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-9.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL13114.nasl - Type : ACT_GATHER_INFO
2014-08-22	Name : The remote host is affected by multiple vulnerabilities. File : juniper_nsm_jsa10642.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-132.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-80.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-110726.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-110831.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-111205.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-110726.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-110831.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-111205.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-201202-120216.nasl - Type : ACT_GATHER_INFO
2014-05-19	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201405-24.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-01.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-09.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-46.nasl - Type : ACT_GATHER_INFO
2013-08-11	Name : The remote web server may be affected by multiple vulnerabilities. File : oracle_http_server_cpu_jul_2013.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote web server is affected by several vulnerabilities. File : apache_2_0_65.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0507.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0844.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-130225.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1294.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_7_5.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2012-004.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110511_apr_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_apr_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110531_apr_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110831_httpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120213_httpd_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120221_httpd_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-07-05	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_1_1_1.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-25.nasl - Type : ACT_GATHER_INFO
2012-04-20	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_0_0_24.nasl - Type : ACT_GATHER_INFO
2012-03-07	Name : The remote Fedora host is missing a security update. File : fedora_2012-1642.nasl - Type : ACT_GATHER_INFO
2012-02-29	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-201202-7972.nasl - Type : ACT_GATHER_INFO
2012-02-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2012-02-21	Name : The remote Fedora host is missing a security update. File : fedora_2012-1598.nasl - Type : ACT_GATHER_INFO
2012-02-20	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-201202-120203.nasl - Type : ACT_GATHER_INFO
2012-02-17	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1368-1.nasl - Type : ACT_GATHER_INFO
2012-02-16	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-02-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-02-13	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2012-041-01.nasl - Type : ACT_GATHER_INFO
2012-02-09	Name : The web server running on the remote host has an information disclosure vulne... File : apache_mod_proxy_info_leak2.nasl - Type : ACT_ATTACK
2012-02-07	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2405.nasl - Type : ACT_GATHER_INFO
2012-02-03	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-012.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote web server is affected by multiple vulnerabilities. File : apache_2_2_22.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_4b7dbfab4c6b11e1bc160023ae8e59f0.nasl - Type : ACT_GATHER_INFO
2012-01-19	Name : The remote application server is affected by multiple vulnerabilities. File : websphere_6_1_0_41.nasl - Type : ACT_GATHER_INFO
2012-01-11	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-003.nasl - Type : ACT_GATHER_INFO
2011-12-14	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7882.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-110831.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-111026.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-111130.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7722.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libapr1-7610.nasl - Type : ACT_GATHER_INFO
2011-11-29	Name : The web server running on the remote host has an information disclosure vulne... File : apache_mod_proxy_info_leak.nasl - Type : ACT_ATTACK
2011-11-15	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_d8c901ff0f0f11e1902b20cf30e32f6d.nasl - Type : ACT_GATHER_INFO
2011-11-14	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_38560d790e4211e1902b20cf30e32f6d.nasl - Type : ACT_GATHER_INFO
2011-11-11	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1259-1.nasl - Type : ACT_GATHER_INFO
2011-11-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-168.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7721.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_7_2.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-006.nasl - Type : ACT_GATHER_INFO
2011-10-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-144.nasl - Type : ACT_GATHER_INFO
2011-10-03	Name : The remote Fedora host is missing a security update. File : fedora_2011-12667.nasl - Type : ACT_GATHER_INFO
2011-09-30	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_0_0_1.nasl - Type : ACT_GATHER_INFO
2011-09-16	Name : The remote Fedora host is missing a security update. File : fedora_2011-12715.nasl - Type : ACT_GATHER_INFO
2011-09-12	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-252-01.nasl - Type : ACT_GATHER_INFO
2011-09-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-130.nasl - Type : ACT_GATHER_INFO
2011-09-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2011-09-02	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1199-1.nasl - Type : ACT_GATHER_INFO
2011-09-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2011-08-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_7f6108d2cea811e09d580800279895ea.nasl - Type : ACT_GATHER_INFO
2011-08-30	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2298.nasl - Type : ACT_GATHER_INFO
2011-08-25	Name : The web server running on the remote host is affected by a denial of service ... File : apache_range_dos.nasl - Type : ACT_ATTACK
2011-07-12	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libapr-util1-110701.nasl - Type : ACT_GATHER_INFO
2011-07-12	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libapr-util1-110706.nasl - Type : ACT_GATHER_INFO
2011-07-12	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libapr-util1-7611.nasl - Type : ACT_GATHER_INFO
2011-06-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1134-1.nasl - Type : ACT_GATHER_INFO
2011-06-06	Name : The remote Fedora host is missing a security update. File : fedora_2011-6918.nasl - Type : ACT_GATHER_INFO
2011-06-06	Name : The remote Fedora host is missing a security update. File : fedora_2011-7340.nasl - Type : ACT_GATHER_INFO
2011-06-03	Name : The remote Fedora host is missing a security update. File : fedora_2011-6750.nasl - Type : ACT_GATHER_INFO
2011-06-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0844.nasl - Type : ACT_GATHER_INFO
2011-06-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0844.nasl - Type : ACT_GATHER_INFO
2011-05-26	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-145-01.nasl - Type : ACT_GATHER_INFO
2011-05-25	Name : The remote web server may be affected by a denial of service vulnerability. File : apache_2_2_19.nasl - Type : ACT_GATHER_INFO
2011-05-24	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_99a5590c857e11e096b700300582f9fc.nasl - Type : ACT_GATHER_INFO
2011-05-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-095.nasl - Type : ACT_GATHER_INFO
2011-05-16	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-133-01.nasl - Type : ACT_GATHER_INFO
2011-05-16	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2237.nasl - Type : ACT_GATHER_INFO
2011-05-16	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_00b296b67db111e096b700300582f9fc.nasl - Type : ACT_GATHER_INFO
2011-05-16	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-084.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote web server may be affected by a denial of service vulnerability. File : apache_2_2_18.nasl - Type : ACT_GATHER_INFO
2011-05-12	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0507.nasl - Type : ACT_GATHER_INFO
2011-05-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0507.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	6
Oval ID(s)	28
CPE ID(s)	251
osvdb(s)	7
ExploitDB Exploit(s)	2
Openvas Exploit(s)	66
IAVM(s)	1
Snort® Rule(s)	5
Nessus® Exploit(s)	117

	Related
7.8	CVE-2011-3192
5	CVE-2011-3368
4.6	CVE-2012-0031
4.4	CVE-2011-3607
4.3	CVE-2011-4317
4.3	CVE-2011-1928
4.3	CVE-2011-0419
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)