Oval Definition:
oval:org.mitre.oval:def:8210
Revision Date
:
2014-06-23
Version
:
17
Title
:
DSA-1740 yaws -- denial of service
Description
:
It was discovered that yaws, a high performance HTTP 1.1 webserver, is prone to a denial of service attack via a request with a large HTTP header.
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2009-0751
DSA-1740
Platform(s)
:
Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s)
:
yaws
Definition Synopsis
Release section
Debian GNU/Linux 5.0 is installed
AND
Architecture section
Architecture independent section
Installed architecture is all
AND
Packages section
yaws-wiki is earlier than 1.77-3+lenny1
OR
yaws-mail is earlier than 1.77-3+lenny1
OR
yaws-chat is earlier than 1.77-3+lenny1
OR
yaws-yapp is earlier than 1.77-3+lenny1
OR
Architecture dependent section
Supported architectures section
Installed architecture is s390
OR
Installed architecture is amd64
OR
Installed architecture is sparc
OR
Installed architecture is arm
OR
Installed architecture is i386
OR
Installed architecture is armel
OR
Installed architecture is mips
OR
Installed architecture is ia64
OR
Installed architecture is alpha
OR
Installed architecture is powerpc
OR
Installed architecture is mipsel
OR
Installed architecture is hppa
AND
yaws is earlier than 1.77-3+lenny1
OR
Release section
Debian GNU/Linux 4.0 is installed.
AND
Supported architectures section
Installed architecture is s390
OR
Installed architecture is amd64
OR
Installed architecture is sparc
OR
Installed architecture is powerpc
OR
Installed architecture is i386
OR
Installed architecture is mips
OR
Installed architecture is ia64
OR
Installed architecture is alpha
OR
Installed architecture is mipsel
OR
Installed architecture is arm
AND
yaws is earlier than 1.65-4etch1
BACK