oval:org.mitre.oval:def:13296

Definition Id: oval:org.mitre.oval:def:13296

Oval ID:	oval:org.mitre.oval:def:13296
Title:	USN-860-1 -- apache2 vulnerabilities
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. The flaw is with TLS renegotiation and potentially affects any software that supports this feature. Attacks against the HTTPS protocol are known, with the severity of the issue depending on the safeguards used in the web application. Until the TLS protocol and underlying libraries are adjusted to defend against this vulnerability, a partial, temporary workaround has been applied to Apache that disables client initiated TLS renegotiation. This update does not protect against server initiated TLS renegotiation when using SSLVerifyClient and SSLCipherSuite on a per Directory or Location basis. Users can defend againt server inititiated TLS renegotiation attacks by adjusting their Apache configuration to use SSLVerifyClient and SSLCipherSuite only on the server or virtual host level. It was discovered that mod_proxy_ftp in Apache did not properly sanitize its input when processing replies to EPASV and PASV commands. An attacker could use this to cause a denial of service in the Apache child process. Another flaw was discovered in mod_proxy_ftp. If Apache is configured as a reverse proxy, an attacker could send a crafted HTTP header to bypass intended access controls and send arbitrary commands to the FTP server
Family:	unix	Class:	patch
Reference(s):	USN-860-1 CVE-2009-3555 CVE-2009-3094 CVE-2009-3095	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	apache2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-doc DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-src DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2 DPKG is earlier than 2.2.8-1ubuntu0.14 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2.2-common DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-threaded-dev DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.14 AND apache2-prefork-dev DPKG is earlier than 2.2.8-1ubuntu0.14 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-src DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2 DPKG is earlier than 2.2.9-7ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-mpm-worker DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2.2-common DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-suexec-custom DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-suexec DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-mpm-prefork DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-threaded-dev DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-mpm-event DPKG is earlier than 2.2.9-7ubuntu3.5 AND apache2-prefork-dev DPKG is earlier than 2.2.9-7ubuntu3.5 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-mpm-prefork DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-mpm-itk DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-mpm-worker DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-mpm-event DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2.2-common DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2 DPKG is earlier than 2.2.12-1ubuntu2.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2.2-bin DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-utils DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-suexec-custom DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-suexec DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-threaded-dev DPKG is earlier than 2.2.12-1ubuntu2.1 AND apache2-prefork-dev DPKG is earlier than 2.2.12-1ubuntu2.1 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independent section Installed architecture is all AND apache2-doc DPKG is earlier than 2.0.55-4ubuntu2.9 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libapr0 DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-utils DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-mpm-worker DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-mpm-perchild DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-common DPKG is earlier than 2.0.55-4ubuntu2.9 AND libapr0-dev DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2 DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-threaded-dev DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-mpm-prefork DPKG is earlier than 2.0.55-4ubuntu2.9 AND apache2-prefork-dev DPKG is earlier than 2.0.55-4ubuntu2.9 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-src DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2 DPKG is earlier than 2.2.11-2ubuntu2.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-mpm-worker DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2.2-common DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-suexec-custom DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-suexec DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-mpm-prefork DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-threaded-dev DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-mpm-event DPKG is earlier than 2.2.11-2ubuntu2.5 AND apache2-prefork-dev DPKG is earlier than 2.2.11-2ubuntu2.5

Definition Id: oval:org.mitre.oval:def:13079

Oval ID:	oval:org.mitre.oval:def:13079
Title:	Ubuntu 9.10 is installed
Description:	Ubuntu 9.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.10	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):
Definition Synopsis:
Ubuntu 9.10 is installed
Referenced By:
oval:org.mitre.oval:def:13296

Definition Id: oval:org.mitre.oval:def:13250

Oval ID:	oval:org.mitre.oval:def:13250
Title:	Ubuntu 8.04 is installed
Description:	Ubuntu 8.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.04	Version:	3
Platform(s):	Ubuntu 8.04	Product(s):
Definition Synopsis:
Ubuntu 8.04 is installed
Referenced By:
oval:org.mitre.oval:def:13296

Definition Id: oval:org.mitre.oval:def:13319

Oval ID:	oval:org.mitre.oval:def:13319
Title:	Ubuntu 6.06 is installed
Description:	Ubuntu 6.06 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:6.06	Version:	3
Platform(s):	Ubuntu 6.06	Product(s):
Definition Synopsis:
Ubuntu 6.06 is installed
Referenced By:
oval:org.mitre.oval:def:13296

Definition Id: oval:org.mitre.oval:def:13306

Oval ID:	oval:org.mitre.oval:def:13306
Title:	Ubuntu 8.10 is installed
Description:	Ubuntu 8.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.10	Version:	3
Platform(s):	Ubuntu 8.10	Product(s):
Definition Synopsis:
Ubuntu 8.10 is installed
Referenced By:
oval:org.mitre.oval:def:13296

Definition Id: oval:org.mitre.oval:def:12669

Oval ID:	oval:org.mitre.oval:def:12669
Title:	Ubuntu 9.04 is installed
Description:	Ubuntu 9.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.04	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):
Definition Synopsis:
Ubuntu 9.04 is installed
Referenced By:
oval:org.mitre.oval:def:13296

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0625s

Facebook rss twitter linkedin mail