|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2003-114: mod_auth_any Vulnerability Assessment Details
|
RHSA-2003-114: mod_auth_any |
||
Check for the version of the mod_auth_any packages Detailed Explanation for this Vulnerability Assessment Updated mod_auth_any packages are available for Red Hat Enterprise Linux. These updated packages fix vulnerabilities associated with the manner in which mod_auth_any escapes shell arguments when calling external programs. The Web server module mod_auth_any permits the Apache httpd server to call arbitrary external programs to verify user passwords. Vulnerabilities have been found in versions of mod_auth_any included in Red Hat Enterprise Linux concerning the method by which mod_auth_any escapes shell arguments when calling external programs. These vulnerabilities permit remote attackers to run arbitrary commands as the user under which the Web server is running. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0084 to these issues. All users are advised to upgrade to these errata packages, which change the method by which external programs are invoked and, therefore, make these programs invulnerable to these issues. Red Hat would like to thank Daniel Jarboe and Maneesh Sahani for bringing these issues to our attention. Solution : http://rhn.redhat.com/errata/RHSA-2003-114.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
Extron RGB-160XI Analog Computer Video 60-378-01
$187.06
The analog thing modern open source, educational, low-cost analog computer
$800.00
Vintage 1960s Donner Model 3000 Analog Computer ~ MUSEUM PIECE Extremely Rare
$4000.00
Apple Macintosh SE/30 M5119 Computer 8MB RAM Recapped Working *See Description*
$475.00
NEW Aquarius+ Computer Signature Edition - 8Bit Retro System
$229.00
Landen Computer. Circa 1898. the Rapid Computer Company. With Original Case.
$425.00
Burr Brown Analog Computer parts Circuit boards w Helipot Potentiometers 1631a
$85.00
IBM Modem Saver Phone Line Tester
$7.99
Two (2) vintage The Analog Computing Pocket Reference Cards, 1985
$19.99
ACASIS PCIE Capture Card HDMI 1.4 1080P60HZ PCIE 2.0 X4 20Gbps for Video Capture
$248.99
|
||
No Discussions have been posted on this vulnerability. |