Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Slackware Local Security Checks >> SSA-2004-154-01 mod_ssl


Vulnerability Assessment Details

SSA-2004-154-01 mod_ssl

Vulnerability Assessment Summary
SSA-2004-154-01 mod_ssl

Detailed Explanation for this Vulnerability Assessment

New mod_ssl packages are available for Slackware 8.1, 9.0, 9.1, and -current
to fix a security issue. The packages were upgraded to mod_ssl-2.8.18-1.3.31
fixing a buffer overflow that may permit remote attackers to execute arbitrary
code via a client certificate with a long subject DN, if mod_ssl is
configured to trust the issuing CA. Web sites running mod_ssl should upgrade
to the new set of apache and mod_ssl packages. There are new PHP packages as
well to fix a Slackware-specific local denial-of-service issue (an additional
Slackware advisory SSA:2004-154-02 has been issued for PHP).

More details about the mod_ssl issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0488



Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Michel Arboi

Cables, Connectors

PowerEdge R710 2.5" Perc 6i Raid Controller Kit T954J w/ Batt + Cbls VW740 WC7K9
$45.95
PowerEdge R710 2.5Dell PowerEdge R610 Perc 6i Raid Controller Kit T954J w/ Batt + Cbls RF5PF FTTNX
$39.95
Dell PowerEdge R610 Perc 6i Raid Controller Kit T954J w/ Batt + Cbls RF5PF FTTNX pictureAreca 1882ix 16+4 port 6gbps sas RAID card with 8GB cache
$700.0
Areca 1882ix 16+4 port 6gbps sas RAID card with 8GB cache pictureLSI SAS 9286CV-8e 6GB/S 8 PORT 1GB cache RAID 0,1,5,6,10,50,60 PCI-E 3.0 CARD
$498.0
LSI SAS 9286CV-8e 6GB/S 8 PORT 1GB cache RAID 0,1,5,6,10,50,60 PCI-E 3.0 CARD picture


Discussions

No Discussions have been posted on this vulnerability.