version 1.401, 2002/06/28 08:05:38 |
version 1.402, 2002/06/28 10:36:19 |
|
|
<a name=modssl></a> |
<a name=modssl></a> |
<li><font color=#009000><strong>008: SECURITY FIX: June 26, 2002</strong></font><br> |
<li><font color=#009000><strong>008: SECURITY FIX: June 26, 2002</strong></font><br> |
A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd |
A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd |
module, leading to possible remote crash or exploit. |
module, leading to possible remote crash or exploit.<br> |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/008_mod_ssl.patch">A source code patch exists which remedies the problem</a>. |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/008_mod_ssl.patch">A source code patch exists which remedies the problem</a>. |
<p> |
<p> |
<a name=resolver></a> |
<a name=resolver></a> |
|
|
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
3.4</a>, and a patch for the vulnerable releases is available as part of the |
3.4</a>, and a patch for the vulnerable releases is available as part of the |
<a href="http://www.openssh.com/txt/preauth.adv">security advisory</a>. |
<a href="http://www.openssh.com/txt/preauth.adv">security advisory</a>. |
<br> |
|
<p> |
<p> |
<a name=httpd></a> |
<a name=httpd></a> |
<li><font color=#009000><strong>005: SECURITY FIX: June 19, 2002</strong></font><br> |
<li><font color=#009000><strong>005: SECURITY FIX: June 19, 2002</strong></font><br> |