|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2002:072: mod_ssl Vulnerability Assessment Details
|
MDKSA-2002:072: mod_ssl |
||
Check for the version of the mod_ssl package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory MDKSA-2002:072 (mod_ssl). A cross-site scripting vulnerability was discovered in mod_ssl by Joe Orton. This only affects servers using a combination of wildcard DNS and 'UseCanonicalName off' (which is not the default in Mandrake Linux). With this setting turned off, Apache will attempt to use the hostname:port that the client supplies, which is where the problem comes into play. With this setting turned on (the default), Apache constructs a self-referencing URL and will use ServerName and Port to form the canonical name. It is recommended that all users upgrade, regardless of the setting of the 'UseCanonicalName' configuration option. Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2002:072 Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
IBM Model M - 1391401 - 01MAR89 - Vintage Mechanical Keyboard - READ DESCRIPTION
$49.99
60s 70s 80s CLASSIC ROCK Music Collection - Over 1500 songs - Vintage, Lot
$33.99
Vintage Albert Specialty Co Lighted Contact Printer Replacement Part
$20.00
APE-FACE XPL Printer Interface For Atari Computers Vintage
$20.00
Vintage Microsoft Windows 2000 Server Beta 3, 1999 TechNet
$25.00
Vintage Microsoft Small Business Server 4.0 Service Pack CDs, 1999 TechNet
$20.00
1985 The Personal Computer Book Of Vintage Computers Atari Victor Eagle PC
$12.00
Vintage MICROSOFT Basic Mouse 1.0 PS/2 Windows 98 2000 Computer Wired NEW SEALED
$19.49
Vintage Commodore Amiga Trumpcard Pro Controller Card
$99.99
Vintage Industrial 1984 Micro Systems - Z80 CPX-BMX Board 128K
$115.00
|
||
No Discussions have been posted on this vulnerability. |