Skip to Content.
Sympa Menu

sm-security - [SM-Security] SECURITY UPDATE for http/apache2

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Eric Sandall <eric AT sandall.us>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] SECURITY UPDATE for http/apache2
  • Date: Tue, 28 Sep 2004 14:27:02 -0700

Security update to fix the following vulnerability:
Fix merging of the Satisfy directive, which was applied to the surrounding
context and could allow access despite configured authentication. PR 31315.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811

The following files are attached for spell http/apache2:
DETAILS
HISTORY

-sandalle

--
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Attachment: apache2.tar.bz2
Description: application/bzip




Archive powered by MHonArc 2.6.24.

Top of Page