drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Rechteprüfung in apache-mod_security
Name: |
Mangelnde Rechteprüfung in apache-mod_security |
|
ID: |
MDVSA-2014:081 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva Enterprise Server 5.0, Mandriva Business Server 1.0 |
|
Datum: |
Do, 8. Mai 2014, 20:43 |
|
Referenzen: |
http://advisories.mageia.org/MGASA-2014-0180.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5705 |
|
Applikationen: |
ModSecurity |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1399559956-13181-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2014:081 http://www.mandriva.com/en/support/security/ _______________________________________________________________________
Package : apache-mod_security Date : May 8, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 _______________________________________________________________________
Problem Description:
Updated apache-mod_security packages fix security vulnerability: Martin Holst Swende discovered a flaw in the way mod_security handled chunked requests. A remote attacker could use this flaw to bypass intended mod_security restrictions, allowing them to send requests containing content that should have been removed by mod_security (CVE-2013-5705). _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5705 http://advisories.mageia.org/MGASA-2014-0180.html _______________________________________________________________________
Updated Packages:
Mandriva Enterprise Server 5: db46a0d3c58282dcfe04727dd86e2a17 mes5/i586/apache-mod_security-2.5.12-0.6mdvmes5.2.i586.rpm aca483fdd1636091ee22011f982a0ca0 mes5/i586/mlogc-2.5.12-0.6mdvmes5.2.i586.rpm 9161a3c2199d97c0280bab4e55c80b4e mes5/SRPMS/apache-mod_security-2.5.12-0.6mdvmes5.2.src.rpm
Mandriva Enterprise Server 5/X86_64: 9399f1df36d87e88bbbc9c6168f3e9d8 mes5/x86_64/apache-mod_security-2.5.12-0.6mdvmes5.2.x86_64.rpm fb3954ad17067ea1151ad39a5bb416bf mes5/x86_64/mlogc-2.5.12-0.6mdvmes5.2.x86_64.rpm 9161a3c2199d97c0280bab4e55c80b4e mes5/SRPMS/apache-mod_security-2.5.12-0.6mdvmes5.2.src.rpm
Mandriva Business Server 1/X86_64: 5054d6b07b39f3388015fecb23656c36 mbs1/x86_64/apache-mod_security-2.6.3-5.4.mbs1.x86_64.rpm ffcf62b9982c5be8b222763df594de24 mbs1/x86_64/mlogc-2.6.3-5.4.mbs1.x86_64.rpm d3b3db04cacc97c7d0f14f20eeab1cda mbs1/SRPMS/apache-mod_security-2.6.3-5.4.mbs1.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFTa2rxmqjQ0CJFipgRAv9cAKDDkwpqvpQKm/tJVJCrh1QkALEMygCgleax ykAeFzQAZ3ZCzGCu3FjYMhA= =9msu -----END PGP SIGNATURE-----
------------=_1399559956-13181-1 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com _______________________________________________________
------------=_1399559956-13181-1--
|
|
|
|