Fedora Core 4 Update: mod_auth_pgsql-2.0.1-8.1

    Date27 Jan 2006
    CategoryFedora
    4638
    Posted ByJoe Shakespeare
    Several format string flaws were found in the way mod_auth_pgsql logs information. It may be possible for a remote attacker to execute arbitrary code as the 'apache' user if mod_auth_pgsql is used for user authentication. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3656 to this issue. Please note that this issue only affects servers which have mod_auth_pgsql installed and configured to perform user authentication against a PostgreSQL database. Red Hat would like to thank iDefense for reporting this issue.
    ---------------------------------------------------------------------
    Fedora Update Notification
    FEDORA-2005-015
    2006-01-06
    ---------------------------------------------------------------------
    
    Product     : Fedora Core 4
    Name        : mod_auth_pgsql
    Version     : 2.0.1                      
    Release     : 8.1                  
    Summary     : Basic authentication for the Apache web server using a PostgreSQL database.
    Description :
    mod_auth_pgsql can be used to limit access to documents served by a web server
    by checking fields in a table in a PostgresQL database.
    
    ---------------------------------------------------------------------
    Update Information:
    
    Several format string flaws were found in the way
    mod_auth_pgsql logs information. It may be possible for a
    remote attacker to execute arbitrary code as the 'apache'
    user if mod_auth_pgsql is used for user authentication. The
    Common Vulnerabilities and Exposures project assigned the
    name CVE-2005-3656 to this issue.
    
    Please note that this issue only affects servers which have
    mod_auth_pgsql installed and configured to perform user
    authentication against a PostgreSQL database.
    
    Red Hat would like to thank iDefense for reporting this issue.
    ---------------------------------------------------------------------
    * Fri Jan  6 2006 Joe Orton  2.0.1-8.1
    - add security fix for CVE-2005-3656
    - don't strip .so file so debuginfo works
    
    
    ---------------------------------------------------------------------
    This update can be downloaded from:
      http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
    
    d92214578ca55f9fe41d1ae02bf6d43e  SRPMS/mod_auth_pgsql-2.0.1-8.1.src.rpm
    747cb8b5486624f9df1057fca3ee7e86  ppc/mod_auth_pgsql-2.0.1-8.1.ppc.rpm
    7039f4f23f6a28fc27faa06ef83ea3a0  ppc/debug/mod_auth_pgsql-debuginfo-2.0.1-8.1.ppc.rpm
    d5815a490b1ec2c2f59f9715253d5665  x86_64/mod_auth_pgsql-2.0.1-8.1.x86_64.rpm
    4a1db6971295f3cc99b8641485577123  x86_64/debug/mod_auth_pgsql-debuginfo-2.0.1-8.1.x86_64.rpm
    6ce00956921bda6ae3f5f6ed19bdde75  i386/mod_auth_pgsql-2.0.1-8.1.i386.rpm
    4b265b8401bc3c5b56140b0bb65ce159  i386/debug/mod_auth_pgsql-debuginfo-2.0.1-8.1.i386.rpm
    
    This update can also be installed with the Update Agent; you can
    launch the Update Agent with the 'up2date' command.  
    ---------------------------------------------------------------------
    
    -- 
    fedora-announce-list mailing list
    This email address is being protected from spambots. You need JavaScript enabled to view it.
    https://www.redhat.com/mailman/listinfo/fedora-announce-list
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"65","type":"x","order":"1","pct":57.52,"resources":[]},{"id":"88","title":"Should be more technical","votes":"15","type":"x","order":"2","pct":13.27,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"33","type":"x","order":"3","pct":29.2,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.