[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Savannah-hackers] address@hidden: [SECURITY] [DSA-132-1] apache-ssl chu

From: Mark H. Weaver
Subject: [Savannah-hackers] address@hidden: [SECURITY] [DSA-132-1] apache-ssl chunk handling vulnerability]
Date: Wed, 19 Jun 2002 14:43:44 -0400

------- Start of forwarded message -------
X-Envelope-Sender: address@hidden
Date: Wed, 19 Jun 2002 15:09:53 +0200
From: Wichert Akkerman <address@hidden>
To: address@hidden
Mail-Followup-To: address@hidden
Content-Disposition: inline
X-Debian: PGP check passed for security officers
Subject: [SECURITY] [DSA-132-1] apache-ssl chunk handling vulnerability
Priority: urgent
Reply-To: address@hidden
X-Spam-Status: No, hits=-5.0 required=4.7 tests=PGP_SIGNATURE version=2.01
Resent-From: address@hidden
X-Mailing-List: <address@hidden> 
X-Loop: address@hidden
Resent-Sender: address@hidden


- - ------------------------------------------------------------------------
Debian Security Advisory DSA-132-1                   address@hidden                         Wichert Akkerman
June 19, 2002
- - ------------------------------------------------------------------------

Package        : apache-ssl
Problem type   : remote DoS / exploit
Debian-specific: no
CVE name       : CAN-2002-0392
CERT advisory  : VU#944335

Mark Litchfield found a denial of service attack in the Apache
web-server. While investigating the problem the Apache Software
Foundation discovered that the code for handling invalid requests which
use chunked encoding also might allow arbitrary code execution on 64 bit

This has been fixed in version of the Debian apache-ssl
package and we recommand that you upgrade your apache-ssl package

An update for the soon to be released Debian GNU/Linux 3.0/woody
distribution is not available at the moment.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.2 alias potato
- - ---------------------------------

  Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

  Source archives:
      MD5 checksum: 8ab934c0a178cfcef6fab8ec8439a8b6
      MD5 checksum: aa8b107a770a9ee133135751340e95d7
      MD5 checksum: e28b3b656449a5a2f9080286ae3d743e

  Alpha architecture:
      MD5 checksum: 66766a2077879878e08d0546b39afa1e

  ARM architecture:
      MD5 checksum: d8831766486bc4554a4471480b0456e4

  Intel IA-32 architecture:
      MD5 checksum: 906bb15e2e7b89e6025cb2589435d585

  Motorola 680x0 architecture:
      MD5 checksum: 737f885f049d825e9c61c4edcf505afc

  PowerPC architecture:
      MD5 checksum: 45ea56ed463d54e19626091bbbae2d27

  Sun Sparc architecture:
      MD5 checksum: 5185e05f5ca1a6f5aa7a4b7e25c80438

  These packages will be moved into the stable distribution on its next

- - -- 
- - ----------------------------------------------------------------------------
apt-get: deb stable/updates main
dpkg-ftp: dists/stable/updates/main
Mailing list: address@hidden

Version: 2.6.3ia
Charset: noconv


- -- 
To UNSUBSCRIBE, email to address@hidden
with a subject of "unsubscribe". Trouble? Contact address@hidden
------- End of forwarded message -------

reply via email to

[Prev in Thread] Current Thread [Next in Thread]