oval:org.mitre.oval:def:19191

Definition Id: oval:org.mitre.oval:def:19191

Oval ID:	oval:org.mitre.oval:def:19191
Title:	HP-UX Running Apache, Remote Denial of Service (DoS), Local Increase of Privilege
Description:	protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0053	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02761 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.12 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.12 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.12 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP version is less than B.2.2.15.12 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.12 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.12 OR Criteria meets HP Security Bulletin HPSBUX02761 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.03 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.03 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.03 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.03 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.03 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.03

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0288s

Facebook rss twitter linkedin mail