httpd-2.2.3-53.3.0.1.AXS3

エラータID: AXSA:2011-346:03

リリース日: 
2011/11/09 Wednesday - 13:22
題名: 
httpd-2.2.3-53.3.0.1.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。<br />
<br />
[Security Fix]<br />
- Apache HTTP Server の mod_proxy モジュールは、RewriteRule および ProxyPassMatch パターンマッチを適切に処理しないため、イントラネットサーバにリクエストを送信される脆弱性が存在します。 (CVE-2011-3368)<br />
<br />
一部CVEの翻訳文はJVNからの引用になります。<br />
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2011-3368
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. httpd-2.2.3-53.3.0.1.AXS3.src.rpm
    MD5: cc3929857cd5ae32ec0edeef7c53879e
    SHA-256: ef829f58f775ad1269fb91ecabc2141fe06d9dc57d04315d5bfcc8589883d95b
    Size: 6.25 MB

Asianux Server 3 for x86
  1. httpd-2.2.3-53.3.0.1.AXS3.i386.rpm
    MD5: 3d11a157b2d5cea3d6fcc4a8f2c63ef1
    SHA-256: e6a5260e0ee1c6496bdc456855bd7daedb4063d1ed1da61958ebfa7eb6896509
    Size: 1.11 MB
  2. httpd-devel-2.2.3-53.3.0.1.AXS3.i386.rpm
    MD5: 4de80aa4756fd133786973750f3b0cc7
    SHA-256: 6b51cabb3a0ed849051ef4d08842f1c76c183e8f3ebaac9fef775a4a19b6fdce
    Size: 152.74 kB
  3. httpd-manual-2.2.3-53.3.0.1.AXS3.i386.rpm
    MD5: 877aeb45bd7a914f4983d0b5781aef35
    SHA-256: e12939b6c233fd9f457108b58ddebdcb0575cc328cf46260734d3e5ac4ae9267
    Size: 825.11 kB
  4. mod_ssl-2.2.3-53.3.0.1.AXS3.i386.rpm
    MD5: f15a56698864bd7a726d92a514ec922e
    SHA-256: f957581c7cbf6151ab4044bb1f528a720050e498badfd6d667faf58758847993
    Size: 93.63 kB

Asianux Server 3 for x86_64
  1. httpd-2.2.3-53.3.0.1.AXS3.x86_64.rpm
    MD5: f3ee47dff699f31c53e32978ae4a0fab
    SHA-256: 09016f173413fa824b185477c6e75134b73d3f74d11170c21b7d9ed45226fb89
    Size: 1.12 MB
  2. httpd-devel-2.2.3-53.3.0.1.AXS3.x86_64.rpm
    MD5: f120ba6d109f7b4c7810cd15e5117149
    SHA-256: 21fb7f5815bb87c9fc6d5f1c8585edb90425634c5e6e5738c5f217daf0f0fb67
    Size: 152.64 kB
  3. httpd-manual-2.2.3-53.3.0.1.AXS3.x86_64.rpm
    MD5: 1f75e0ae72229bd5806d722afab48874
    SHA-256: d93ba4f1f9e3429060396227ed0c9dd6a422a8d7999ea7f08875a030ed60380d
    Size: 824.91 kB
  4. mod_ssl-2.2.3-53.3.0.1.AXS3.x86_64.rpm
    MD5: 505e1185b65b5b5a38c7ec1ffb5297d4
    SHA-256: 705ea18479a62bc6c1c3952f881329255b45e0dcd94aaa2a14eedc1a81860fd1
    Size: 94.44 kB