Oval Definition:	oval:org.mitre.oval:def:20843
Revision Date: 2014-02-24 Version: 75 Title: RHSA-2012:0128: httpd security update (Moderate) Description: protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. Family: unix Class: patch Status: ACCEPTED Reference(s): CESA-2012:0128 CVE-2011-3607 CVE-2011-3639 CVE-2011-4317 CVE-2012-0031 CVE-2012-0053 RHSA-2012:0128-01 Platform(s): CentOS Linux 6 Red Hat Enterprise Linux 6 Product(s): httpd Definition Synopsis Redhat 6 section The operating system installed on the system is Red Hat Enterprise Linux 6 AND Packages section httpd-devel is earlier than 0:2.2.15-15.el6_2.1 OR httpd-tools is earlier than 0:2.2.15-15.el6_2.1 OR httpd-manual is earlier than 0:2.2.15-15.el6_2.1 OR mod_ssl is earlier than 0:2.2.15-15.el6_2.1 OR httpd is earlier than 0:2.2.15-15.el6_2.1 OR Centos 6 section The operating system installed on the system is CentOS Linux 6.x AND Packages section httpd-devel is earlier than 0:2.2.15-15.el6.centos.1 OR httpd-tools is earlier than 0:2.2.15-15.el6.centos.1 OR httpd-manual is earlier than 0:2.2.15-15.el6.centos.1 OR mod_ssl is earlier than 0:2.2.15-15.el6.centos.1 OR httpd is earlier than 0:2.2.15-15.el6.centos.1
BACK