|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2006-0618: apache Vulnerability Assessment Details
|
RHSA-2006-0618: apache |
||
Check for the version of the apache packages Detailed Explanation for this Vulnerability Assessment Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server available for free. A bug was found in Apache where an invalid Expect header sent to the server was returned to the user in an unescaped error message. This could permit a possible hacker to perform a cross-site scripting attack if a victim was tricked into connecting to a site and sending a carefully crafted Expect header. (CVE-2006-3918) While a web browser cannot be forced to send an arbitrary Expect header by a third-party attacker, it was recently discovered that certain versions of the Flash test can manipulate request headers. If users running such versions can be persuaded to load a web page with a malicious Flash applet, a cross-site scripting attack against the server may be possible. Users of Apache should upgrade to these updated packages, which contain a backported patch to correct this issue. Solution : http://rhn.redhat.com/errata/RHSA-2006-0618.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security |
||
Cables, Connectors |
🍎🖥️ Vintage Apple III Computer - Works Great Monitor, Hard Drive, Software 🍎
$2000.00
Vintage 1990 Apple Keyboard II M0487
$49.99
Vintage Apple Ethernet Twisted-Pair Transceiver Model M0437
$19.99
Vintage Apple Macintosh IIsi M0360 Computer For Parts or Repair w/Power Cord
$69.99
Vintage Apple Macintosh SE Case - Empty Shell - Housing retro project
$60.00
VINTAGE APPLE IMAC USB KEYBOARD - M2452 - 1999 - tested working
$39.99
Vintage Apple Macintosh Extended Keyboard II AEK M3501 + ADB Mouse M2706 TESTED
$99.00
VINTAGE APPLE 1980’s COMPUTER LAPEL PIN BADGE
$14.99
MacEffects Gray ALPS Mechanical Keyboard for Vintage Apple IIe Computers
$195.00
VINTAGE Apple Macintosh LC (FOR PARTS - DOES NOT BOOT) NO HDD #27
$49.99
|
||
No Discussions have been posted on this vulnerability. |