oval:org.mitre.oval:def:13769

Definition Id: oval:org.mitre.oval:def:13769

Oval ID:	oval:org.mitre.oval:def:13769
Title:	DSA-1834-2 apache2 -- denial of service
Description:	The previous update caused a regression for apache2 in Debian 4.0 "etch". Using mod_deflate together with mod_php could cause segfaults when a client aborts a connection. This update corrects this flaw. For reference the original advisory text is below. A denial of service flaw was found in the Apache mod_proxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. This issue did not affect Debian 4.0 "etch". A denial of service flaw was found in the Apache mod_deflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause mod_deflate to consume large amounts of CPU if mod_deflate was enabled for a large file. A similar flaw related to HEAD requests for compressed content was also fixed. The oldstable distribution, this problem has been fixed in version 2.2.3-4+etch10. The other distributions stable, testing and unstable were not affected by the regression. This advisory also provides updated apache2-mpm-itk packages which have been recompiled against the new apache2 packages. Updated packages for apache2-mpm-itk for the s390 architecture are not included yet. They will be released as soon as they become available. We recommend that you upgrade your apache2, apache2-mpm-itk package.
Family:	unix	Class:	patch
Reference(s):	DSA-1834-2 CVE-2009-1890 CVE-2009-1891	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.3-4+etch10 AND apache2-src DPKG is earlier than 2.2.3-4+etch10 AND apache2-doc DPKG is earlier than 2.2.3-4+etch10 AND apache2 DPKG is earlier than 2.2.3-4+etch10 AND apache2-utils DPKG is earlier than 2.2.3-4+etch10 AND apache2-mpm-worker DPKG is earlier than 2.2.3-4+etch10 AND apache2.2-common DPKG is earlier than 2.2.3-4+etch10 AND apache2-threaded-dev DPKG is earlier than 2.2.3-4+etch10 AND apache2-mpm-event DPKG is earlier than 2.2.3-4+etch10 AND apache2-mpm-prefork DPKG is earlier than 2.2.3-4+etch10 AND apache2-prefork-dev DPKG is earlier than 2.2.3-4+etch10 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is hppa AND Installed architecture is sparc AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND apache2-mpm-itk DPKG is earlier than 2.2.3-01-2+etch4

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:13769

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0291s

Facebook rss twitter linkedin mail