What is the severity of RHSA-2009:1155?

The vulnerability RHSA-2009:1155 is classified as a denial of service flaw in the Apache HTTP Server.

How do I fix RHSA-2009:1155?

To fix RHSA-2009:1155, update to the package version 2.2.10-10.ep5.el5 for the Apache HTTP Server.

What systems are affected by RHSA-2009:1155?

RHSA-2009:1155 affects certain versions of the Apache HTTP Server 2.2.10 on Red Hat Enterprise Linux 5.

What are the potential impacts of RHSA-2009:1155?

If exploited, RHSA-2009:1155 could result in excessive CPU consumption, leading to denial of service.

Who is responsible for reporting RHSA-2009:1155?

The advisory RHSA-2009:1155 was issued by Red Hat in response to reported vulnerabilities in its software.

Vulnerability/
RHSA-2009:1155

14/7/2009

RHSA-2009:1155: Important: httpd security update

First published: Tue Jul 14 2009(Updated: )

The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the Apache mod_proxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. (CVE-2009-1890) A flaw was found in the handling of the "Options" and "AllowOverride" directives used by the Apache HTTP Server. In configurations using the "AllowOverride" directive with certain "Options=" arguments, local users were not restricted from executing commands from a Server-Side-Include script as intended. (CVE-2009-1195) A denial of service flaw was found in the Apache mod_deflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause mod_deflate to consume large amounts of CPU if mod_deflate was enabled for a large file. (CVE-2009-1891) All users of JBoss Enterprise Web Server 1.0.0 should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Affected Software	Affected Version	How to fix
redhat/httpd	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5
redhat/httpd	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5
redhat/httpd-devel	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5
redhat/httpd-manual	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5
redhat/httpd-devel	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5
redhat/httpd-manual	<2.2.10-10.ep5.el5	2.2.10-10.ep5.el5

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2009:1155?
The vulnerability RHSA-2009:1155 is classified as a denial of service flaw in the Apache HTTP Server.
How do I fix RHSA-2009:1155?
To fix RHSA-2009:1155, update to the package version 2.2.10-10.ep5.el5 for the Apache HTTP Server.
What systems are affected by RHSA-2009:1155?
RHSA-2009:1155 affects certain versions of the Apache HTTP Server 2.2.10 on Red Hat Enterprise Linux 5.
What are the potential impacts of RHSA-2009:1155?
If exploited, RHSA-2009:1155 could result in excessive CPU consumption, leading to denial of service.
Who is responsible for reporting RHSA-2009:1155?
The advisory RHSA-2009:1155 was issued by Red Hat in response to reported vulnerabilities in its software.

agent/severity
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/references
agent/remedy
agent/description
agent/title
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2009:1155
agent/software-canonical-lookup
agent/event
agent/trending
agent/tags
agent/source
package-manager/redhat