Oval Definition:oval:org.mitre.oval:def:22777
Revision Date:2014-05-26Version:21
Title:ELSA-2009:1075: httpd security update (Moderate)
Description:The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2008-1678
CVE-2009-1195
ELSA-2009:1075-01
Platform(s):Oracle Linux 5
Product(s):httpd
Definition Synopsis
  • Oracle Linux 5.x
  • AND rpm test
  • httpd-manual is earlier than 0:2.2.3-22.el5_3.1
  • OR httpd-devel is earlier than 0:2.2.3-22.el5_3.1
  • OR mod_ssl is earlier than 0:2.2.3-22.el5_3.1
  • OR httpd is earlier than 0:2.2.3-22.el5_3.1
    • BACK