==========================================================Ubuntu Security Notice USN-908-1             March 10, 2010
apache2 vulnerabilities
CVE-2010-0408, CVE-2010-0434
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  apache2-common                  2.0.55-4ubuntu2.10

Ubuntu 8.04 LTS:
  apache2.2-common                2.2.8-1ubuntu0.15

Ubuntu 8.10:
  apache2.2-common                2.2.9-7ubuntu3.6

Ubuntu 9.04:
  apache2.2-common                2.2.11-2ubuntu2.6

Ubuntu 9.10:
  apache2.2-common                2.2.12-1ubuntu2.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

It was discovered that mod_proxy_ajp did not properly handle errors when
a client doesn't send a request body. A remote attacker could exploit this
with a crafted request and cause a denial of service. This issue affected
Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10. (CVE-2010-0408)

It was discovered that Apache did not properly handle headers in
subrequests under certain conditions. A remote attacker could exploit this
with a crafted request and possibly obtain sensitive information from
previous requests. (CVE-2010-0434)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   132089 426096b5df2f66afdc5238e1a36ad7ae
          Size/MD5:     1159 89f54b0237d3770822f4dcfa62bfa873
          Size/MD5:  6092031 45e32c9432a8e3cf4227f5af91b03622

  Architecture independent packages:

          Size/MD5:  2126014 e9b8c902a850462498ab760300ff6cac

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   834550 7bfe05f8ccc35b49e8998bc75f114e44
          Size/MD5:   229650 ebc761664f68ccd5805e63eaecc1fba6
          Size/MD5:   224730 da6f9cd05b7a8feaa738a91d67f39c74
          Size/MD5:   229224 e087b7f813d42f2622c5292ce30f1ffa
          Size/MD5:   172968 37cfdc9dd428d96eb91e11c94edc4988
          Size/MD5:   173760 3269814929d4a742c3aa4df43b125238
          Size/MD5:    95562 782b22fdd2dca1031065c5d4d6fa6931
          Size/MD5:    37614 448a6d1968f64595bb30644a50ec9dee
          Size/MD5:   287158 882d910084c66b442bbdcd04643b67b2
          Size/MD5:   145732 27844ce798fe5a89b0a612254a31a9ce

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   787934 252a6dcbd54e8107a2e78faaa2cf233a
          Size/MD5:   204202 7859818455e0b7729e5c5a7b1351b824
          Size/MD5:   200134 dc6ecf58a2877af8233c2022ff26c193
          Size/MD5:   203674 4d1017b6964f5dba1baf3a8f6605659a
          Size/MD5:   172992 67ae3a23063006ba0c7b85996a216f0b
          Size/MD5:   173764 fcff9551d128201554386ca20b4cad04
          Size/MD5:    93528 61dcc7a007dd827c0853c43dd817a53c
          Size/MD5:    37610 1f5ef7a7233531c6ca3389103ad31081
          Size/MD5:   263174 cfb02840f6dfaaedbf6b3afc09781c53
          Size/MD5:   133598 417b4a1b229447ad9b3f4a6fcfb23de2

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   860642 48ff1bc6cb2f03809199402b276d3c79
          Size/MD5:   221616 ce06bf591c2af7dac0f21c64179b6b9f
          Size/MD5:   217250 854c8b46a495752ce561bc64f69926a6
          Size/MD5:   221100 6094b4cda7e06af45d46e82931037912
          Size/MD5:   172980 bf6bda9d816af33d521aef4d0d19d910
          Size/MD5:   173760 3ed3d7f93b21bf01acde0cda9f81e3f6
          Size/MD5:   105290 bab3bec77e0fd96f8f6d71a925c6c4a6
          Size/MD5:    37612 f950cac274a27ddd8c3e3ba0d51c6e67
          Size/MD5:   282738 fec6bcf82912a5eb03663ff9897a2730
          Size/MD5:   142828 7a5f915bc7c92ad390b1b84f02b05167

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   805156 d9a317d7cd5165c41b311425c4cd227a
          Size/MD5:   211746 08b1d3606bda53788af291b3b5848601
          Size/MD5:   207470 8154c23c5caaceea57ee8350d829a78d
          Size/MD5:   211134 65758f643c7bcc58881076faed925e43
          Size/MD5:   172970 ba40003b159c9a955dfdd4dd45d30404
          Size/MD5:   173748 856ec4539cb6137db9edd4abb623852e
          Size/MD5:    94610 8420b4b80fb4e1a9fa39e4b04e12578a
          Size/MD5:    37616 2b84d8a572d75fd4d3a10acfdecb8d0e
          Size/MD5:   269164 1ee1afbfba811a082a82114ced122943
          Size/MD5:   131556 ac64fc4b82792216551a68654da5aca7

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:   143511 9ae15355b3b33bfffd57b7c387a623af
          Size/MD5:     1382 c73a33ddb07551037f66f941f7c09f67
          Size/MD5:  6125771 39a755eb0f584c279336387b321e3dfc

  Architecture independent packages:

          Size/MD5:  1929148 986e20d917416ba04256f2b65f58af23
          Size/MD5:    73044 8797cead9183b7b45e26a87f85c03a61
          Size/MD5:  6258176 9ddd16e5a205eda2c6a15ec769a9e9ce
          Size/MD5:    45970 f63af256575964b262bbb41999cc0a72

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   253208 84c7f752e5e232464ccf193902b39a77
          Size/MD5:   248818 e5edc28f76ec94116740b83f7f8d76cd
          Size/MD5:   252604 49e3c70c1f97daf2707ae3bf5f0e943f
          Size/MD5:   205706 3b163e56ebd2f5992eef86803679dffd
          Size/MD5:   206460 19cb7386cdf00c156f64b9f2c4bc1250
          Size/MD5:   141812 38463dc035875bba573a420aeb78fc55
          Size/MD5:   804224 7e23a2e17dfa6f8a37588b42c37590e9

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   236194 5e191cc83788c2e66635413453771481
          Size/MD5:   231720 c079f54cbdb931cab220c8c587f3936b
          Size/MD5:   235446 f64813b7af3c9975d86b4c28892e759b
          Size/MD5:   205716 077591e2e4cdca278f2784f97ad3f8d3
          Size/MD5:   206484 51e99c350efa425ed768720c4c98313b
          Size/MD5:   140770 d328f36ab33f61f3157024501909a139
          Size/MD5:   755798 927a56f1405f1309893050ea9237f994

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   235722 876be7a8737de0a515f21aa629a09d45
          Size/MD5:   231362 2078e50363d811291351a1c27bc58c0b
          Size/MD5:   234856 0c7d564fd292dbc12b74de8a3484aab5
          Size/MD5:   205722 9eb8e1d684b3a96c93ff0f86cc709adb
          Size/MD5:   206492 f340746f1893e25a720000bb560b0676
          Size/MD5:   141342 baeccaadd0e91b7045b7358a6c7cbda8
          Size/MD5:   749976 b83e2963384a68fe52faa734017b57d0

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   254284 d31f219bd5eda15bceb06bc9e25eabab
          Size/MD5:   249736 c66c5975b356db9cf6b42a042271c6e3
          Size/MD5:   253842 5247b89584455be5623c404b24796cec
          Size/MD5:   205728 58d1431d486459d641db835ad4a35fc2
          Size/MD5:   206490 a722a8aa18f08ab19ab127dfda9443a7
          Size/MD5:   158536 47458a0cbd6cfa4bdc06e97d67741e75
          Size/MD5:   906298 aeccf21a452a6fe9c369ebb2b0b04a4e

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   237516 4326c5061f9c765db5d0bcc01e1669be
          Size/MD5:   233278 0d5babd2b04b62bad540b8ee17fbe06e
          Size/MD5:   236708 f6699f5dfaf29a1eaecf637e9fdcbdf0
          Size/MD5:   205724 da2a97a28c9c2914c55ccc1606ae77e9
          Size/MD5:   206490 9ac523aa40acc889678392b2f061725f
          Size/MD5:   143976 7cc95b10718a6252dc6fa8cc58045192
          Size/MD5:   765616 5f1cca257dcce7bb56fe342236b9ea1b

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:   139326 10707e14c87b5b776a073113a94c6a1b
          Size/MD5:     1789 74082691bed2864c646f3a8ac3a16eb4
          Size/MD5:  6396996 80d3754fc278338033296f0d41ef2c04

  Architecture independent packages:

          Size/MD5:  2041858 706b343b84044f2f532e0941ee93ff03
          Size/MD5:  6537860 6a767abce0dd1e61107a459fbf029691
          Size/MD5:    45626 84e04ec49010cfac41f939c27b9c9a31

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   255130 68f5cf8b5548d407b51d6db614c6b9b2
          Size/MD5:   249326 796985e36b4ad3423909947fcca71966
          Size/MD5:   254478 45e12d6d18cadeb552888ca1395a81c4
          Size/MD5:   208652 63e0d760fcaf0bd82a661336fe39cae6
          Size/MD5:    84610 8a594fba559844dba85496f60e84b7f7
          Size/MD5:    82966 6becc4c35b209a8a09a9715f9e8f44f0
          Size/MD5:   209682 b28ea955f642c5a9cd3854da82843ef0
          Size/MD5:   147882 b83148d248dbb4ac13fd57db5ce2650c
          Size/MD5:   820544 934937ebb87e765ada13608b50b2bd84

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   241500 53f66d0add4830740f819855f679ad0e
          Size/MD5:   236122 50550a1af2dfb61ac9da7e28367c036e
          Size/MD5:   240782 6d9798847ab81e1d565f1be057a4626e
          Size/MD5:   208662 d1f85491999b1c89f4fbe3c523c854e1
          Size/MD5:    84042 470d82a4b6a25286ac4b21f6e59dd373
          Size/MD5:    82444 ecf0e6f5465f9f9e38058e756891c8fe
          Size/MD5:   209682 72e627fd62be2175f1caf6979aa33528
          Size/MD5:   146726 09954f0d419252bba5a954c4a749c56d
          Size/MD5:   778764 0cbf3c7a7d0fcb2cdf4c15239c7c9ab7

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   238456 c307976b4b9dda8e908db9aab888487f
          Size/MD5:   233076 df1ab53d9ba76510482ea9e81e0c05ed
          Size/MD5:   237732 d7a685c6e7c7f85e4596e446c5f81116
          Size/MD5:   208660 dad1c46c1e379ad508874730419357c1
          Size/MD5:    83998 70e9d64a0b2003a3431af50686dbb3a9
          Size/MD5:    82426 14ba830d1f933a00e49bfcb834f01333
          Size/MD5:   209688 e2ad15523a015b78aa1d79a457977f6f
          Size/MD5:   146418 2ea6c8dd9e2e67ca9ca01b5368e8a492
          Size/MD5:   766738 939fd23c53ad2e3856950b539c49e572

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   261634 1fd498222280f99f3baa05e76b8b3134
          Size/MD5:   256204 ddb9aebbba56b1247d744c24d620c311
          Size/MD5:   260994 18d27f39cb23053b475b9c797ed4a0b9
          Size/MD5:   208672 a63ee94b91522612a0d9baf8cf8be1e9
          Size/MD5:    84694 442e717226809ef8450ec6640d985165
          Size/MD5:    83042 075c585197c7424b0f075791c26d7fff
          Size/MD5:   209692 5f3226ac36647403501e70aea30ae295
          Size/MD5:   161152 f5aef8d2db2ce2f0a61610d220b8554f
          Size/MD5:   926422 6ee1f22222dc895c7d4e90a22c6e82e4

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   246832 44d9328891ed6a5b27b8b7ca17dd1e65
          Size/MD5:   241392 3132cdcdd9ff2390f33c004ba0d06c25
          Size/MD5:   246146 a22417d0af89d571057186566cba70d6
          Size/MD5:   208658 3a9623afdc7080fdd8ed7571ec44f93b
          Size/MD5:    84230 23a679c07ac52f14db5d5502c797fbe0
          Size/MD5:    82596 58f1b8c280a18ff5714fcde8f31bb767
          Size/MD5:   209684 7d0b63fc5c72b67fb67056f75003507d
          Size/MD5:   151052 bc015d14efdd9b781416fcd4dcbaf3da
          Size/MD5:   784092 3d4f997fd5cb3372e23e7a7b5b33a818

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:   142681 9290c7aa5d38184a259ed1e8b31f302e
          Size/MD5:     1796 c92dc8b9df72439a68fb9acabe825d34
          Size/MD5:  6806786 03e0a99a5de0f3f568a0087fb9993af9

  Architecture independent packages:

          Size/MD5:  2219398 a59488ae00cefb2d9e763986951b46f7
          Size/MD5:    46768 d4959ab1a2fcac6febf73d72af47c8ea
          Size/MD5:  6948418 f6ad43ce72bed437112d0474764c4e72

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   259164 b493228cb147781d7ae20e832a859c6e
          Size/MD5:   253356 111e4f5738a5c1d25a4c0539dfb3eb01
          Size/MD5:   258546 953c300480822f9bba76921a551342ff
          Size/MD5:   213416 9a208bf91694f084f124f7cdb7086ae5
          Size/MD5:   214372 5c138ead01971ef4e25c6f2fc4a8c081
          Size/MD5:   151268 c10773d75fc13a933af172f8c25ed928
          Size/MD5:   827176 9c5f22af93970e386b3392ea6496012a
          Size/MD5:    87926 053a597373bfafedc54c7f56bbc4d36f
          Size/MD5:    86272 99845d4c0c7e1fb6106e12ef89d6b1de

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   245642 a4975d08a72dbbc7a0c9a1ecb467a625
          Size/MD5:   240198 2c67ecad0ff90d9c3cac969c69cc6403
          Size/MD5:   245072 cc06f54e8e72c9ef88f18c637258c296
          Size/MD5:   213426 5692c703a7442e93cd6c201d0b784609
          Size/MD5:   214390 22e7a59f09641e26a56398e8165548a4
          Size/MD5:   150168 7c2dc8f846d3d11985fb4ea4c9e40714
          Size/MD5:   784518 23be691c35729ab36f7764aeb02ef4c1
          Size/MD5:    87310 2af044869390444fa21197f6bde2c8f0
          Size/MD5:    85706 4814c65a1b0da47ee4c5189b68956890

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   242526 0ccc9efc179daa8a3994818daf5d962f
          Size/MD5:   237034 979638ca12fef068895ca14d40adf1fe
          Size/MD5:   241914 2e5438ad43673a0b0467946a3904f883
          Size/MD5:   213426 fc47493b35308f26cf370d5fc36a764c
          Size/MD5:   214396 e591f754bfef0e3f097db8f234aef1c4
          Size/MD5:   149888 5ff213998d0756589eb12387ec99d53e
          Size/MD5:   773726 d3347559226812470d87af62e3be7a53
          Size/MD5:    87248 cd0c669ff56ada0d600dd7f62c3ab406
          Size/MD5:    85680 6d064bc67f5a528ed3c9aa0f251d536d

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   265602 dd914e1e1392318a1efff84fef689fb4
          Size/MD5:   260618 78b8f50bab2b0e4fed67b49b9a2f34ec
          Size/MD5:   265262 05581b19a7ad11ac34237065447137ea
          Size/MD5:   213440 17d41a63c07a53b6a47e8ddbaafde343
          Size/MD5:   214406 df3a389b1a92f641b6baed063420f71e
          Size/MD5:   164580 259b63754f6f73dbd2857356c04a959a
          Size/MD5:   932678 86c9127387640b057ea9e0fdf50a6b40
          Size/MD5:    88008 4aabc23270af1875dd1798e21e5ecf41
          Size/MD5:    86280 6d918a123609e62508baea60fd579ee9

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   250926 080921e0439dd8c221d6fe92ef246e86
          Size/MD5:   245236 0cd80a701c6e21d779840e590380f60e
          Size/MD5:   250252 d3510ceebeb7a254dc61d2e37cfb8232
          Size/MD5:   213440 50fdbf9ec8d08e9fab9df4352a702703
          Size/MD5:   214412 519c15df22f7ff3da1391ddbed717f21
          Size/MD5:   154426 ca9003b8a71bbbe73328af4fc0e4428d
          Size/MD5:   789462 085ceebc571d99f2528891fd138266f7
          Size/MD5:    87510 2a8052e30ece8670fcd7b5b5cc444adb
          Size/MD5:    85860 ea55b592d9b4c45cd94af4836961f9e0

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:   185966 1fd1b39b8acae8efd95cfba73035ef5d
          Size/MD5:     1889 f259c015de981d3f9e6ba6652e89ef53
          Size/MD5:  6678149 17f017b571f88aa60abebfe2945d7caf

  Architecture independent packages:

          Size/MD5:  2246764 243a32914d322c363e8181f4e609eaee
          Size/MD5:     2344 d4a431e66497ad75c6c76ef16b94337f
          Size/MD5:     2376 47b97a23cf9be3fbbda7d4d33b0203f9
          Size/MD5:     2314 bf4f9dccdb1eb33ef9dde9e845ea69f4
          Size/MD5:   285202 04dcce263dc86b401d1341f95fe25906
          Size/MD5:     1426 0a27231773121ea4ed159283ae664f94
          Size/MD5:     2372 df8f7e39a1be46de7e96df5da2013af3

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   137082 192e416bdda75ce8c45c5207c7f6b975
          Size/MD5:   138190 d0e2523df5544601e824d9d6d34eca23
          Size/MD5:   156784 27d845ebfc48e6935f2b213c9140bb6e
          Size/MD5:  1399724 12708155a417a9d090380907d15411ec
          Size/MD5:    92644 887937b07afcc3701bc66a1640ac8733
          Size/MD5:    91024 6d34a77de75b7152327ceb73775b3915

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   137092 126e3c92ab8652016340d39f9d223f59
          Size/MD5:   138188 31da570017edbce3f6f34628e5d36fa8
          Size/MD5:   155324 0cff520071def0ae1cd458fbb354683f
          Size/MD5:  1309290 3ce857da081471731f401a08e02daa21
          Size/MD5:    92028 f60d21f5b476f5c9e9a3886acf7a1385
          Size/MD5:    90466 d04da6a2077f9c40796266107c84e747

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   137090 85e576764c7e72449a1229feacbc3a1d
          Size/MD5:   138206 b4d5ac7685535fab17c694233f894f83
          Size/MD5:   155242 c03cb87555975f754c34537084c374b2
          Size/MD5:  1290654 88629a149a84206ca6e37ee1ce4923a3
          Size/MD5:    91978 d114a24e4ba510f72b7b7c721b8a7376
          Size/MD5:    90466 a4d405b139bc75e526807eadd473dc49

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   137088 c316a4af0913e33aaadb3621702118f3
          Size/MD5:   138192 f9100a53b31914b16dda8ff5f9afb218
          Size/MD5:   161188 2296d3ec6e45bb715e9d918df985b36c
          Size/MD5:  1390306 8e8c87274ae72fce5d1911ff05a20e2a
          Size/MD5:    92552 1a28d81a25546498dbbbfaf0d0e929bf
          Size/MD5:    90918 e368a1ac77fc510630f1696f25268ac3

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   137098 259de5ac6919ba28eef8f8c3bdbb5ae0
          Size/MD5:   138198 106dfdd3820957cd12d23d9ff14cabf8
          Size/MD5:   159640 41e05eb97a5e5f2682636b124a52970f
          Size/MD5:  1298086 5c7ddce4dc35f6ea81e73b7797b091c7
          Size/MD5:    92318 89e113250f9925383eb4cd2ac0941d58
          Size/MD5:    90708 f7094a69d4607bd77e24d02559b07aab

Ubuntu 908-1: Apache vulnerabilities

March 10, 2010
It was discovered that mod_proxy_ajp did not properly handle errors when a client doesn't send a request body

Summary

Update Instructions

References

Severity
apache2 vulnerabilities

Package Information

Related News

4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved