Oval Definition:oval:org.mitre.oval:def:19791
Revision Date:2015-04-20Version:27
Title:HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass
Description:PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-4885
Platform(s):HP-UX 11
Product(s):
Definition Synopsis
  • Criteria meets HP Security Bulletin HPSBUX02741
  • platforms
  • HP-UX B.11.23
  • OR HP-UX B.11.31
  • AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.35.01
  • OR Criteria meets HP Security Bulletin HPSBUX02741
  • platforms
  • HP-UX B.11.23
  • OR HP-UX B.11.31
  • AND filesets tests
  • hpuxws22APCH32.APACHE version is less than B.2.2.15.11
  • OR hpuxws22APCH32.APACHE2 version is less than B.2.2.15.11
  • OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.11
  • OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.11
  • OR hpuxws22APCH32.MOD_JK version is less than B.2.2.15.11
  • OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.11
  • OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.11
  • OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.11
  • OR hpuxws22APCH32.PHP version is less than B.2.2.15.11
  • OR hpuxws22APCH32.PHP2 version is less than B.2.2.15.11
  • OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.11
  • BACK