Updated httpd packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The Apache HTTP Server is a popular web server.

A flaw was found in the way the mod_dav module of the Apache HTTP Server handled merge requests. An attacker could use this flaw to send a crafted merge request that contains URIs that are not configured for DAV, causing the httpd child process to crash. (CVE-2013-1896)

All httpd users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the httpd daemon will be restarted automatically.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a     URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request     in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML     data refers to a non-DAV URI. (CVE-2013-1896)

Note that Nessus relies on the presence of the package as reported by the vendor.

- httpd-2.2.x-bnc829056-CVE-2013-1896-pr1482522-mod_dav.diff CVE-2013-1896: Sending a MERGE request against a URI handled by mod_dav_svn with the source href   (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault. [bnc#829056]

- httpd-2.2.x-bnc829057-CVE-2013-1862-mod_rewrite_terminal_escape_sequences.diff CVE-2013-1862: client data written to the RewriteLog must have terminal escape sequences escaped. [bnc#829057]

This collective update for Apache provides the following fixes :

  - Make sure that input that has already arrived on the     socket is not discarded during a non-blocking read     (read(2) returns 0 and errno is set to -EAGAIN).
    (bnc#815621)

  - Close the connection just before an attempted     re-negotiation if data has been read with pipelining.
    This is done by resetting the keepalive status.
    (bnc#815621)

  - Reset the renegotiation status of a client<->server     connection to RENEG_INIT to prevent falsely assumed     status. (bnc#791794)

  - 'OPTIONS *' internal requests are intercepted by a dummy     filter that kicks in for the OPTIONS method. Apple     iPrint uses 'OPTIONS *' to upgrade the connection to     TLS/1.0 following RFC 2817. For compatibility, check if     an Upgrade request header is present and skip the filter     if yes. (bnc#791794)

  - Sending a MERGE request against a URI handled by     mod_dav_svn with the source href (sent as part of the     request body as XML) pointing to a URI that is not     configured for DAV will trigger a segfault. (bnc#829056,     CVE-2013-1896)

  - Client data written to the RewriteLog must have terminal     escape sequences escaped. (bnc#829057, CVE-2013-1862)

The version of JBoss Enterprise Application Platform installed on the remote system is affected by the following issues :

  - Flaws in the mod_info, mod_status, mod_imagemap,     mod_ldap, and mod_proxy_ftp modules can allow an     attacker to perform cross-site scripting (XSS) attacks.
    (CVE-2012-3499)

  - Flaws in the web interface of the mod_proxy_balancer     module can allow a remote attacker to perform XSS     attacks. (CVE-2012-4558)

  - A flaw in mod_rewrite can allow remote attackers to     execute arbitrary commands via an HTTP request     containing an escape sequence for a terminal emulator.
    (CVE-2013-1862)

  - A flaw in the method by which the mod_dav module     handles merge requests can allow an attacker to create     a denial of service by sending a crafted merge request     that contains URIs that are not configured for DAV.
    (CVE-2013-1896)

  - A flaw in PicketBox can allow local users to obtain the     admin encryption key by reading the Vault data file.
    (CVE-2013-1921)

  - A flaw in Apache Santuario XML Security can allow     context-dependent attackers to spoof an XML Signature     by using the CanonicalizationMethod parameter to     specify an arbitrary weak algorithm. (CVE-2013-2172)

  - A flaw in JGroup's DiagnosticsHandler can allow remote     attackers to obtain sensitive information and execute     arbitrary code by re-using valid credentials.
    (CVE-2013-4112)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
69336	CentOS 5 / 6 : httpd (CESA-2013:1156)	Nessus	CentOS Local Security Checks	2013/8/14	2021/1/4	medium
217980	Linux Distros Unpatched Vulnerability : CVE-2013-1896	Nessus	Misc.	2025/3/4	2026/1/28	high
75109	openSUSE Security Update : apache2 (openSUSE-SU-2013:1337-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
69474	SuSE 11.2 / 11.3 Security Update : Apache2 (SAT Patch Numbers 8137 / 8138)	Nessus	SuSE Local Security Checks	2013/8/27	2021/1/19	medium
72238	JBoss Enterprise Application Platform 6.1.1 Update (RHSA-2013:1209)	Nessus	Red Hat Local Security Checks	2014/1/31	2022/4/11	medium

检测

插件搜索

medium

high

medium

medium

medium