Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Fedora Core 2: FEDORA-2004-204 Critical: Httpd Memory Leak And Overflow

fedora
Calendar Grey July 22, 2004
Scroller Fedora
Address critical vulnerabilities in the httpd package of Fedora, including memory leaks and buffer overflow issues.
This patch fixes a remotely triggerable memory leak and a buffer overflow vulnerability.

Summary

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

Update Information:

This update includes the latest stable release of Apache httpd 2.0, including security fixes for a remotely triggerable memory leak (CVE CAN-2004-0493), and a buffer overflow in mod_ssl which can be triggered only by a (trusted) client certificate with a long subject DN field (CVE CAN-2004-0488).

* Tue Jun 29 2004 Joe Orton <jorton@redhat.com> 2.0.50-2.1

- update to 2.0.50 - mod_autoindex: don't truncate output on stat() failure (#126930)

This update can be downloaded from:


88f76a8960e558ea9cd0f833ec26ecbf SRPMS/httpd-2.0.50-2.1.src.rpm b21369e9d1ad14bde9f8cdd474d4e576 x86_64/httpd-2.0.50-2.1.x86_64.rpm b31e0fc8d050a42ab13c82feedc01b1b x86_64/httpd-devel-2.0.50-2.1.x86_64.rpm d40fc1d0f89cc86ebec838639ba37ea1 x86_64/httpd-manual-2.0.50-2.1.x86_64.rpm 5fa5e5728b8dedc20b2704de1bd37840 x86_64/mod_ssl-2.0.50-2.1.x86_64.rpm 6e65479828eb9e8a4c7b2424ebf39495 x86_64/debug/httpd-debuginfo-2.0.50-2.1.x86_64.rpm da86a44426edabbadceae2d58fc0b1d5 i386/httpd-2.0.50-2.1.i386.rpm 000b8...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overflow critical Fedora httpd memory leak

Change Log

References

CORE 2:
Fedora Update Notification FEDORA-2004-204 2004-07-19
Product : Fedora Core 2 Name : httpd Version : 2.0.50 Release : 2.1 Summary : Apache HTTP Server Description : Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet.

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora Core 2
Name: httpd
Version: 2.0.50
Release: 2.1
Summary: Apache HTTP Server
Product: Fedora Core 1
Name: httpd
Version: 2.0.50
Release: 1.0
Summary: Apache HTTP Server

Topics%20covered

Topics Covered

security advisory buffer overflow critical Fedora httpd memory leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.