Advisories:rPSA-2008-0328

From rPath Wiki

rPath Security Advisory 2008-0328-1

Published: 2008-11-22

Products

• rPath Appliance Platform Linux Service 1
• rPath Linux 1

Rating

Minor

Exposure Level Classification

Remote Deterministic Denial of Service

Updated Versions

• httpd=conary.rpath.com@rpl:1/2.0.63-0.4-1
• mod_ssl=conary.rpath.com@rpl:1/2.0.63-0.4-1

rPath Issue Tracking System

• RPL-2624
• RPL-2708

References

• CVE-2008-2364
• CVE-2008-2939

Description

Previous versions of the httpd package contain multiple vulnerabilities:

mod_proxy_http is vulnerable to a Denial of Service attack, and

mod_proxy_ftp contains a weakness that enables a cross-site-scripting

(XSS) attack.

In their default configurations, rPath Linux 1 and rPath Appliance

Platform Linux Service 1 are not vulnerable to these attacks.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html