oval:org.mitre.oval:def:21452

Definition Id: oval:org.mitre.oval:def:21452

Oval ID:	oval:org.mitre.oval:def:21452
Title:	RHSA-2011:1391: httpd security and bug fix update (Moderate)
Description:	The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1391-01 CVE-2011-3348 CVE-2011-3368	Version:	29
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	httpd
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section httpd-devel is earlier than 0:2.2.15-9.el6_1.3 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.3 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.3 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.3 AND httpd is earlier than 0:2.2.15-9.el6_1.3

Definition Id: oval:org.mitre.oval:def:20273

Oval ID:	oval:org.mitre.oval:def:20273
Title:	The operating system installed on the system is Red Hat Enterprise Linux 6
Description:	The operating system installed on the system is Red Hat Enterprise Linux 6.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:6	Version:	6
Platform(s):	Red Hat Enterprise Linux 6	Product(s):
Definition Synopsis:
Red Hat Enterprise 6 is installed AND NOT Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:21452