From: Secunia Security Advisories (sec-advsecunia.com)
Date: Mon Jun 28 2004 - 04:08:55 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Debian update for apache

SECUNIA ADVISORY ID:
SA11946

VERIFY ADVISORY:
http://secunia.com/advisories/11946/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
From remote

OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 3.0
http://secunia.com/product/143/

DESCRIPTION:
Debian has issued an update for apache. This fixes a vulnerability,
which can be exploited by malicious people to cause a DoS (Denial of
Service) and potentially compromise a vulnerable system.

For more information:
SA11841

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5.dsc
Size/MD5 checksum: 668 728e205962ce1f02155cdeeae3b33596
http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5.diff.gz
Size/MD5 checksum: 299155 1f6504cbb56e55b0b67b5f911dc7601a
http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26.orig.tar.gz
Size/MD5 checksum: 2586182 5cd778bbe6906b5ef39dbb7ef801de61

Architecture independent components:

http://security.debian.org/pool/updates/main/a/apache/apache-doc_1.3.26-0woody5_all.deb
Size/MD5 checksum: 1129912 25ce8bbf0d753fa2b7a6e26c32f34789

Alpha architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_alpha.deb
Size/MD5 checksum: 395496 3681480dcd48c186aa3759e7a3aeabe0
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_alpha.deb
Size/MD5 checksum: 925884 5deb71887a2bda9b51a84d52809ee96d
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_alpha.deb
Size/MD5 checksum: 713886 ef9f3a034e9e995397c966c4ccb1ba14

ARM architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_arm.deb
Size/MD5 checksum: 361138 20108dbf929f356aeb02d9adf40317c7
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_arm.deb
Size/MD5 checksum: 838572 bace0690140cc427ae34bc82a169ebd1
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_arm.deb
Size/MD5 checksum: 544356 7ebfaea0a36f5661c82f8facbeb97199

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_i386.deb
Size/MD5 checksum: 353488 0cb1fefd1daf2f3d3d74bc837e5dcee6
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_i386.deb
Size/MD5 checksum: 822024 8f94a40d22fe86da3a513945745b46bd
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_i386.deb
Size/MD5 checksum: 536422 18bec488eb2cb1f08234d063f3f018fc

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_ia64.deb
Size/MD5 checksum: 436866 d73b9c14b39b1ce3cecdf25c4bb7b4d3
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_ia64.deb
Size/MD5 checksum: 1012118 70574b1082626c0a63e4214ed2565965
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_ia64.deb
Size/MD5 checksum: 949112 f455cbafb0be5fdbb61841e5f538f649

HP Precision architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_hppa.deb
Size/MD5 checksum: 386164 2b45089dda26eba6c04313b636ac6d90
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_hppa.deb
Size/MD5 checksum: 891114 b777e3971bfcf3fabcd8f00a6356f193
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_hppa.deb
Size/MD5 checksum: 587064 b06b99057dce7e6501e716d65f8e75f9

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_m68k.deb
Size/MD5 checksum: 347890 5d0c289522098f0f209df8444bb59b9e
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_m68k.deb
Size/MD5 checksum: 820892 ec0656021adabae1022b461b882775b0
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_m68k.deb
Size/MD5 checksum: 537236 280185606f9d5160454bc355818007fa

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_mips.deb
Size/MD5 checksum: 376464 a94cf93b405cf05372fc5d4f8bf7672f
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_mips.deb
Size/MD5 checksum: 843944 cb9e216b23a38b6d39296ce8b7ccf996
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_mips.deb
Size/MD5 checksum: 576406 7cfff44064ce0f2a02c9cbb97b068d83

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_mipsel.deb
Size/MD5 checksum: 376518 770cd115049bb2158e201549cc35520a
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_mipsel.deb
Size/MD5 checksum: 842596 3b85507e74eb531d61429befd63ece53
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_mipsel.deb
Size/MD5 checksum: 565592 2399177b56c48b52abe29ff6a48d5299

PowerPC architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_powerpc.deb
Size/MD5 checksum: 366994 679d12a1cef75a8aa5b3408ab5c0bd79
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_powerpc.deb
Size/MD5 checksum: 846036 7188ed09e4fc2a18fbb426516f57fe8b
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_powerpc.deb
Size/MD5 checksum: 558974 e42357dd7be10c9bbc2b36a865792f5b

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_s390.deb
Size/MD5 checksum: 363750 c5e1a6db42fce09c1e4076640894cb4f
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_s390.deb
Size/MD5 checksum: 832464 3df3958b908e8f3acbe05f3e6acc032f
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_s390.deb
Size/MD5 checksum: 559418 ef6af5cb54b3f4da25be386bf2c89ec7

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/a/apache/apache_1.3.26-0woody5_sparc.deb
Size/MD5 checksum: 360892 ed75775f79c9ed173c9e0baf2450be01
http://security.debian.org/pool/updates/main/a/apache/apache-common_1.3.26-0woody5_sparc.deb
Size/MD5 checksum: 847292 b54050e25ac6166e390dd72018538bcf
http://security.debian.org/pool/updates/main/a/apache/apache-dev_1.3.26-0woody5_sparc.deb
Size/MD5 checksum: 544812 d3b7f0401f78d5f4d87e724d0f17f30f

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.3.31-2.

ORIGINAL ADVISORY:
http://lists.debian.org/debian-security-announce/debian-security-announce-2004/msg00126.html

OTHER REFERENCES:
SA11841:
http://secunia.com/advisories/11841/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]