Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2006-3918 (GCVE-0-2006-3918)
Vulnerability from cvelistv5 – Published: 2006-07-28 00:00 – Updated: 2024-08-07 18:48
VLAI
EPSS
Summary
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
59 references
Date Public
2006-07-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:48:39.410Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20060801-01-P",
"tags": [
"vendor-advisory",
"x_refsource_SGI",
"x_transferred"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"name": "ADV-2010-1572",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"name": "28749",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28749"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"name": "DSA-1167",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"name": "19661",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19661"
},
{
"name": "21744",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21744"
},
{
"name": "20060724 Write-up by Amit Klein: \"Forging HTTP request headers with Flash\"",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"name": "HPSBUX02465",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "1024144",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1024144"
},
{
"name": "22317",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/22317"
},
{
"name": "22523",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/22523"
},
{
"name": "SSRT090208",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "ADV-2006-5089",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"name": "ADV-2006-3264",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"name": "20060508 Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"name": "21598",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21598"
},
{
"name": "21399",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21399"
},
{
"name": "SSRT090192",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "oval:org.mitre.oval:def:10352",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"name": "21478",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21478"
},
{
"name": "RHSA-2006:0619",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"name": "21986",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21986"
},
{
"name": "HPSBUX02612",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"name": "ADV-2006-4207",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"name": "HPSBOV02683",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "21848",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21848"
},
{
"name": "RHSA-2006:0618",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"name": "PK24631",
"tags": [
"vendor-advisory",
"x_refsource_AIXAPAR",
"x_transferred"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"name": "SUSE-SA:2008:021",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"name": "RHSA-2006:0692",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"name": "40256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/40256"
},
{
"name": "SUSE-SA:2006:051",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"name": "ADV-2006-2963",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"name": "21174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21174"
},
{
"name": "SSRT100345",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "USN-575-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"name": "oval:org.mitre.oval:def:12238",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"name": "29640",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29640"
},
{
"name": "1294",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1294"
},
{
"name": "[3.9] 012: SECURITY FIX: October 7, 2006",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD",
"x_transferred"
],
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"name": "PK27875",
"tags": [
"vendor-advisory",
"x_refsource_AIXAPAR",
"x_transferred"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"name": "21172",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21172"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"name": "1016569",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016569"
},
{
"name": "ADV-2006-2964",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"name": "22140",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/22140"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-06T10:08:10.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20060801-01-P",
"tags": [
"vendor-advisory",
"x_refsource_SGI"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"name": "ADV-2010-1572",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"name": "28749",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28749"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"name": "DSA-1167",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"name": "19661",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19661"
},
{
"name": "21744",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21744"
},
{
"name": "20060724 Write-up by Amit Klein: \"Forging HTTP request headers with Flash\"",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"name": "HPSBUX02465",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "1024144",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1024144"
},
{
"name": "22317",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/22317"
},
{
"name": "22523",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/22523"
},
{
"name": "SSRT090208",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "ADV-2006-5089",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"name": "ADV-2006-3264",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"name": "20060508 Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"name": "21598",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21598"
},
{
"name": "21399",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21399"
},
{
"name": "SSRT090192",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "oval:org.mitre.oval:def:10352",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"name": "21478",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21478"
},
{
"name": "RHSA-2006:0619",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"name": "21986",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21986"
},
{
"name": "HPSBUX02612",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"name": "ADV-2006-4207",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"name": "HPSBOV02683",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "21848",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21848"
},
{
"name": "RHSA-2006:0618",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"name": "PK24631",
"tags": [
"vendor-advisory",
"x_refsource_AIXAPAR"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"name": "SUSE-SA:2008:021",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"name": "RHSA-2006:0692",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"name": "40256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/40256"
},
{
"name": "SUSE-SA:2006:051",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"name": "ADV-2006-2963",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"name": "21174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21174"
},
{
"name": "SSRT100345",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "USN-575-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"name": "oval:org.mitre.oval:def:12238",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"name": "29640",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29640"
},
{
"name": "1294",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1294"
},
{
"name": "[3.9] 012: SECURITY FIX: October 7, 2006",
"tags": [
"vendor-advisory",
"x_refsource_OPENBSD"
],
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"name": "PK27875",
"tags": [
"vendor-advisory",
"x_refsource_AIXAPAR"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"name": "21172",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21172"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"name": "1016569",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016569"
},
{
"name": "ADV-2006-2964",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"name": "22140",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/22140"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3918",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20060801-01-P",
"refsource": "SGI",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"name": "ADV-2010-1572",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"name": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"name": "28749",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28749"
},
{
"name": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html",
"refsource": "CONFIRM",
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"name": "DSA-1167",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"name": "19661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19661"
},
{
"name": "21744",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21744"
},
{
"name": "20060724 Write-up by Amit Klein: \"Forging HTTP request headers with Flash\"",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"name": "HPSBUX02465",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "1024144",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1024144"
},
{
"name": "22317",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22317"
},
{
"name": "22523",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22523"
},
{
"name": "SSRT090208",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "ADV-2006-5089",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"name": "ADV-2006-3264",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"name": "20060508 Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"name": "21598",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21598"
},
{
"name": "21399",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21399"
},
{
"name": "SSRT090192",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "oval:org.mitre.oval:def:10352",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"name": "21478",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21478"
},
{
"name": "RHSA-2006:0619",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"name": "21986",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21986"
},
{
"name": "HPSBUX02612",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117",
"refsource": "CONFIRM",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"name": "ADV-2006-4207",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"name": "HPSBOV02683",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "21848",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21848"
},
{
"name": "RHSA-2006:0618",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"name": "PK24631",
"refsource": "AIXAPAR",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"name": "SUSE-SA:2008:021",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"name": "RHSA-2006:0692",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"name": "40256",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/40256"
},
{
"name": "SUSE-SA:2006:051",
"refsource": "SUSE",
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"name": "ADV-2006-2963",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"name": "21174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21174"
},
{
"name": "SSRT100345",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "USN-575-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"name": "oval:org.mitre.oval:def:12238",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"name": "29640",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29640"
},
{
"name": "1294",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1294"
},
{
"name": "[3.9] 012: SECURITY FIX: October 7, 2006",
"refsource": "OPENBSD",
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"name": "PK27875",
"refsource": "AIXAPAR",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"name": "21172",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21172"
},
{
"name": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html",
"refsource": "CONFIRM",
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"name": "1016569",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016569"
},
{
"name": "ADV-2006-2964",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"name": "22140",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22140"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3918",
"datePublished": "2006-07-28T00:00:00.000Z",
"dateReserved": "2006-07-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:48:39.410Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2006-3918",
"date": "2026-05-29",
"epss": "0.91373",
"percentile": "0.99675"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2006-3918\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2006-07-28T00:04:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.\"},{\"lang\":\"es\",\"value\":\"http_protocol.c en (1) IBM HTTP Server 6.0 anterioa a 6.0.2.13 y 6.1 anterior 6.1.0.1, y (2) Apache HTTP Server 1.3 anterior a 1.3.35, 2.0 anterior a 2.0.58, y 2.2 anterior a 2.2.2, no desinfecta la cabecera Expect desde una respuesta HTTP cuando se refleja en un mensaje de error, lo cul podr\u00eda permitir un ataque de tipo secuencia de comandos en sitios cruzados (XSS) utilizando los componentes web del cliente que puede enviar cabeceras de su elecci\u00f3n en las respuesta, como se demostr\u00f3 con la utilizaci\u00f3n de un archivo Flash SWF.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.3.3\",\"versionEndExcluding\":\"1.3.35\",\"matchCriteriaId\":\"5F918B6F-6F62-4DC5-A0A4-2B178A1FE2F0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E304C9-F780-4358-A58D-1E4C93977704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"823BF8BE-2309-4F67-A5E2-EAD98F723468\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F9EF63F-DDA3-448B-92D7-27ED92C51FED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53A61204-33CE-422F-8285-20A5E98ADF3F\"}]}]}],\"references\":[{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://openbsd.org/errata.html#httpd2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2006-0618.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2006-0692.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/21172\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/21174\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/21399\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21478\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21598\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21744\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21848\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21986\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22140\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22317\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22523\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/28749\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/29640\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/40256\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://securityreason.com/securityalert/1294\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1016569\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc?view=rev\u0026revision=394965\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-1.ibm.com/support/docview.wss?uid=swg24013080\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2006/dsa-1167\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_51_apache.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0619.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/19661\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1024144\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-575-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/2963\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/2964\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/3264\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/4207\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/5089\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/1572\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://openbsd.org/errata.html#httpd2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2006-0618.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2006-0692.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/21172\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/21174\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/21399\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21478\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21598\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21744\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21848\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/21986\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22140\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22317\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/22523\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/28749\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/29640\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://secunia.com/advisories/40256\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://securityreason.com/securityalert/1294\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1016569\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc?view=rev\u0026revision=394965\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-1.ibm.com/support/docview.wss?uid=swg24013080\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2006/dsa-1167\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_51_apache.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0619.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/19661\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1024144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-575-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/2963\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/2964\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/3264\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/4207\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/5089\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/1572\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}],\"vendorComments\":[{\"organization\":\"Apache\",\"comment\":\"Fixed in Apache HTTP Server 1.3.35:\\nhttp://httpd.apache.org/security/vulnerabilities_13.html\",\"lastModified\":\"2008-07-02T00:00:00\"}]}}"
}
}
CERTA-2006-AVI-447
Vulnerability from certfr_avis - Published: 2006-10-11 - Updated: 2006-10-11None
Description
Une vulnérabilité a été découverte dans le serveur web http sous OpenBSD. Une personne mal intentionnée peut exploiter cette vulnérabilité via une requête HTTP spécialement construite afin de conduire une attaque par injection de code indirecte.
Solution
Se référer au correctif de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
httpd sous OpenBSD 3.8 et 3.9.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003ehttpd sous OpenBSD 3.8 et 3.9.\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le serveur web http sous\nOpenBSD. Une personne mal intentionn\u00e9e peut exploiter cette\nvuln\u00e9rabilit\u00e9 via une requ\u00eate HTTP sp\u00e9cialement construite afin de\nconduire une attaque par injection de code indirecte.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au correctif de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
}
],
"initial_release_date": "2006-10-11T00:00:00",
"last_revision_date": "2006-10-11T00:00:00",
"links": [
{
"title": "Correctif de s\u00e9curit\u00e9 OpenBSD pour httpd2 du 07 octobre 2006 :",
"url": "http://openbsd.org/errata.html#httpd2"
}
],
"reference": "CERTA-2006-AVI-447",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-10-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte (cross site scripting)"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de httpd sous OpenBSD",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de mise \u00e0 jour OpenBSD du 07 octobre 2006",
"url": null
}
]
}
CERTA-2010-AVI-285
Vulnerability from certfr_avis - Published: 2010-06-23 - Updated: 2010-06-23
Une vulnérabilité dans F-Secure Policy Manager permet l'injection de code indirecte.
Description
Une vulnérabilité a été corrigée dans F-Secure Manager. Son exploitation permet à une personne malintentionnée d'effectuer des attaques de type injection de code indirecte (cross-site scripting).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "F-Secure Policy Manager Server 8.10 et 8.11.",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "F-Secure Policy Manager Server 8.00 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans F-Secure Manager. Son exploitation\npermet \u00e0 une personne malintentionn\u00e9e d\u0027effectuer des attaques de type\ninjection de code indirecte (cross-site scripting).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
}
],
"initial_release_date": "2010-06-23T00:00:00",
"last_revision_date": "2010-06-23T00:00:00",
"links": [],
"reference": "CERTA-2010-AVI-285",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-06-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans F-Secure Policy Manager permet l\u0027injection de\ncode indirecte.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans F-Secure Policy Manager",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 F-Secure FSC-2010-2 du 23 juin 2010",
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
}
]
}
FKIE_CVE-2006-3918
Vulnerability from fkie_nvd - Published: 2006-07-28 00:04 - Updated: 2026-04-16 00:27
Severity
Summary
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| apache | http_server | * | |
| debian | debian_linux | 3.1 | |
| canonical | ubuntu_linux | 6.06 | |
| canonical | ubuntu_linux | 6.10 | |
| canonical | ubuntu_linux | 7.04 | |
| canonical | ubuntu_linux | 7.10 | |
| redhat | enterprise_linux_server | 2.0 | |
| redhat | enterprise_linux_workstation | 2.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5F918B6F-6F62-4DC5-A0A4-2B178A1FE2F0",
"versionEndExcluding": "1.3.35",
"versionStartIncluding": "1.3.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0F9EF63F-DDA3-448B-92D7-27ED92C51FED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "53A61204-33CE-422F-8285-20A5E98ADF3F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
},
{
"lang": "es",
"value": "http_protocol.c en (1) IBM HTTP Server 6.0 anterioa a 6.0.2.13 y 6.1 anterior 6.1.0.1, y (2) Apache HTTP Server 1.3 anterior a 1.3.35, 2.0 anterior a 2.0.58, y 2.2 anterior a 2.2.2, no desinfecta la cabecera Expect desde una respuesta HTTP cuando se refleja en un mensaje de error, lo cul podr\u00eda permitir un ataque de tipo secuencia de comandos en sitios cruzados (XSS) utilizando los componentes web del cliente que puede enviar cabeceras de su elecci\u00f3n en las respuesta, como se demostr\u00f3 con la utilizaci\u00f3n de un archivo Flash SWF."
}
],
"id": "CVE-2006-3918",
"lastModified": "2026-04-16T00:27:16.627",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2006-07-28T00:04:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21172"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21174"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21399"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21478"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21598"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21744"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21848"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21986"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22140"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22317"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22523"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/28749"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/29640"
},
{
"source": "cve@mitre.org",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/40256"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://securityreason.com/securityalert/1294"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1016569"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/19661"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1024144"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21172"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21174"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21399"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21478"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21598"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21744"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21848"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21986"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22140"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22317"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22523"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/28749"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/29640"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/40256"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://securityreason.com/securityalert/1294"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1016569"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/19661"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1024144"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
}
],
"sourceIdentifier": "cve@mitre.org",
"vendorComments": [
{
"comment": "Fixed in Apache HTTP Server 1.3.35:\nhttp://httpd.apache.org/security/vulnerabilities_13.html",
"lastModified": "2008-07-02T00:00:00",
"organization": "Apache"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-67M9-FPJ8-VGMV
Vulnerability from github – Published: 2022-05-03 03:16 – Updated: 2022-05-03 03:16
VLAI
Details
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
{
"affected": [],
"aliases": [
"CVE-2006-3918"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2006-07-28T00:04:00Z",
"severity": "MODERATE"
},
"details": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"id": "GHSA-67m9-fpj8-vgmv",
"modified": "2022-05-03T03:16:18Z",
"published": "2022-05-03T03:16:18Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"type": "WEB",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"type": "WEB",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"type": "WEB",
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"type": "WEB",
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21172"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21174"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21399"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21478"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21598"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21744"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21848"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/21986"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/22140"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/22317"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/22523"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/28749"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/29640"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/40256"
},
{
"type": "WEB",
"url": "http://securityreason.com/securityalert/1294"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1016569"
},
{
"type": "WEB",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"type": "WEB",
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"type": "WEB",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"type": "WEB",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"type": "WEB",
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"type": "WEB",
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/19661"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1024144"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"type": "WEB",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2006-3918
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2006-3918",
"description": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"id": "GSD-2006-3918",
"references": [
"https://www.suse.com/security/cve/CVE-2006-3918.html",
"https://www.debian.org/security/2006/dsa-1167",
"https://access.redhat.com/errata/RHSA-2010:0602",
"https://access.redhat.com/errata/RHSA-2008:0523",
"https://access.redhat.com/errata/RHSA-2006:0692",
"https://access.redhat.com/errata/RHSA-2006:0619",
"https://access.redhat.com/errata/RHSA-2006:0618",
"https://linux.oracle.com/cve/CVE-2006-3918.html",
"https://packetstormsecurity.com/files/cve/CVE-2006-3918"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2006-3918"
],
"details": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"id": "GSD-2006-3918",
"modified": "2023-12-13T01:19:57.572553Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3918",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20060801-01-P",
"refsource": "SGI",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"name": "ADV-2010-1572",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"name": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"name": "28749",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28749"
},
{
"name": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html",
"refsource": "CONFIRM",
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"name": "DSA-1167",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"name": "19661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19661"
},
{
"name": "21744",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21744"
},
{
"name": "20060724 Write-up by Amit Klein: \"Forging HTTP request headers with Flash\"",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"name": "HPSBUX02465",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "1024144",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1024144"
},
{
"name": "22317",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22317"
},
{
"name": "22523",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22523"
},
{
"name": "SSRT090208",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "ADV-2006-5089",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"name": "ADV-2006-3264",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"name": "20060508 Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"name": "21598",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21598"
},
{
"name": "21399",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21399"
},
{
"name": "SSRT090192",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "oval:org.mitre.oval:def:10352",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"name": "21478",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21478"
},
{
"name": "RHSA-2006:0619",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"name": "21986",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21986"
},
{
"name": "HPSBUX02612",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117",
"refsource": "CONFIRM",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"name": "ADV-2006-4207",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"name": "HPSBOV02683",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "21848",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21848"
},
{
"name": "RHSA-2006:0618",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"name": "PK24631",
"refsource": "AIXAPAR",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"name": "SUSE-SA:2008:021",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"name": "RHSA-2006:0692",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"name": "40256",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/40256"
},
{
"name": "SUSE-SA:2006:051",
"refsource": "SUSE",
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"name": "ADV-2006-2963",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"name": "21174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21174"
},
{
"name": "SSRT100345",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "USN-575-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"name": "oval:org.mitre.oval:def:12238",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"name": "29640",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29640"
},
{
"name": "1294",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1294"
},
{
"name": "[3.9] 012: SECURITY FIX: October 7, 2006",
"refsource": "OPENBSD",
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"name": "PK27875",
"refsource": "AIXAPAR",
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"name": "21172",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21172"
},
{
"name": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html",
"refsource": "CONFIRM",
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"name": "1016569",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016569"
},
{
"name": "ADV-2006-2964",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"name": "22140",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/22140"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.3.35",
"versionStartIncluding": "1.3.3",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3918"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20060508 Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1",
"refsource": "BUGTRAQ",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html"
},
{
"name": "20060724 Write-up by Amit Klein: \"Forging HTTP request headers with Flash\"",
"refsource": "BUGTRAQ",
"tags": [
"Broken Link",
"Exploit"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html"
},
{
"name": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965",
"refsource": "CONFIRM",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "http://svn.apache.org/viewvc?view=rev\u0026revision=394965"
},
{
"name": "PK24631",
"refsource": "AIXAPAR",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631"
},
{
"name": "21172",
"refsource": "SECUNIA",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21172"
},
{
"name": "21174",
"refsource": "SECUNIA",
"tags": [
"Not Applicable",
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21174"
},
{
"name": "1016569",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1016569"
},
{
"name": "PK27875",
"refsource": "AIXAPAR",
"tags": [
"Third Party Advisory"
],
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg24013080"
},
{
"name": "RHSA-2006:0618",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0618.html"
},
{
"name": "RHSA-2006:0619",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0619.html"
},
{
"name": "21399",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21399"
},
{
"name": "21478",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21478"
},
{
"name": "DSA-1167",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2006/dsa-1167"
},
{
"name": "20060801-01-P",
"refsource": "SGI",
"tags": [
"Broken Link"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
},
{
"name": "21848",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21848"
},
{
"name": "21598",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21598"
},
{
"name": "21744",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21744"
},
{
"name": "SUSE-SA:2006:051",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/linux/security/advisories/2006_51_apache.html"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm"
},
{
"name": "21986",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/21986"
},
{
"name": "RHSA-2006:0692",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2006-0692.html"
},
{
"name": "22140",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22140"
},
{
"name": "[3.9] 012: SECURITY FIX: October 7, 2006",
"refsource": "OPENBSD",
"tags": [
"Third Party Advisory"
],
"url": "http://openbsd.org/errata.html#httpd2"
},
{
"name": "19661",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/19661"
},
{
"name": "22317",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22317"
},
{
"name": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117",
"refsource": "CONFIRM",
"tags": [
"Broken Link"
],
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"name": "22523",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/22523"
},
{
"name": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html"
},
{
"name": "1294",
"refsource": "SREASON",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://securityreason.com/securityalert/1294"
},
{
"name": "USN-575-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-575-1"
},
{
"name": "28749",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/28749"
},
{
"name": "SUSE-SA:2008:021",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html"
},
{
"name": "29640",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/29640"
},
{
"name": "HPSBUX02465",
"refsource": "HP",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=125631037611762\u0026w=2"
},
{
"name": "HPSBUX02612",
"refsource": "HP",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
},
{
"name": "ADV-2006-2964",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2964"
},
{
"name": "ADV-2006-5089",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/5089"
},
{
"name": "ADV-2006-3264",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/3264"
},
{
"name": "ADV-2006-2963",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/2963"
},
{
"name": "ADV-2006-4207",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"name": "SSRT090208",
"refsource": "HP",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"name": "ADV-2010-1572",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2010/1572"
},
{
"name": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html"
},
{
"name": "1024144",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id?1024144"
},
{
"name": "40256",
"refsource": "SECUNIA",
"tags": [
"Not Applicable"
],
"url": "http://secunia.com/advisories/40256"
},
{
"name": "oval:org.mitre.oval:def:12238",
"refsource": "OVAL",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238"
},
{
"name": "oval:org.mitre.oval:def:10352",
"refsource": "OVAL",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2022-09-21T19:35Z",
"publishedDate": "2006-07-28T00:04Z"
}
}
}
JVNDB-2006-000992
Vulnerability from jvndb - Published: 2009-02-04 17:42 - Updated:2014-05-22 18:03Summary
Multiple Vulnerabilities Concerning Hitachi Web Server
Details
Hitachi Web Server has vulnerabilities listed below:
1. A vulnerability that allows to roll back the Open SSL version when using the SSL.
2. Cross-site scripting vulnerability in contents created automatically by the Hitachi Web Server.
3. Cross-site scripting vulnerability due to inadequate processing of the Expect header.
References
Impacted products
| Vendor | Product | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000992.html",
"dc:date": "2014-05-22T18:03+09:00",
"dcterms:issued": "2009-02-04T17:42+09:00",
"dcterms:modified": "2014-05-22T18:03+09:00",
"description": "Hitachi Web Server has vulnerabilities listed below:\r\n\r\n1. A vulnerability that allows to roll back the Open SSL version when using the SSL.\r\n\r\n2. Cross-site scripting vulnerability in contents created automatically by the Hitachi Web Server.\r\n\r\n3. Cross-site scripting vulnerability due to inadequate processing of the Expect header.",
"link": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000992.html",
"sec:cpe": [
{
"#text": "cpe:/a:hitachi:cosminexus_application_server_enterprise",
"@product": "Cosminexus Application Server Enterprise",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_application_server_standard",
"@product": "Cosminexus Application Server Standard",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_application_server_version_5",
"@product": "Cosminexus Application Server Version 5",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_developer_light_version_6",
"@product": "Cosminexus Developer Light Version 6",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_developer_professional_version_6",
"@product": "Cosminexus Developer Professional Version 6",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_developer_standard_version_6",
"@product": "Cosminexus Developer Standard Version 6",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_developer_version_5",
"@product": "Cosminexus Developer Version 5",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_server_-_enterprise_edition",
"@product": "Cosminexus Server - Enterprise Edition",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_server_-_standard_edition",
"@product": "Cosminexus Server - Standard Edition",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_server_-_standard_edition_version_4",
"@product": "Cosminexus Server - Standard Edition Version 4",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_server_-_web_edition",
"@product": "Cosminexus Server - Web Edition",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_server_-_web_edition_version_4",
"@product": "Cosminexus Server - Web Edition Version 4",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:hitachi_web_server",
"@product": "Hitachi Web Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_enterprise",
"@product": "uCosminexus Application Server Enterprise",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_smart_edition",
"@product": "uCosminexus Application Server Smart Edition",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_standard",
"@product": "uCosminexus Application Server Standard",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer",
"@product": "uCosminexus Developer",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer_light",
"@product": "uCosminexus Developer Light",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer_standard",
"@product": "uCosminexus Developer Standard",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_service_architect",
"@product": "uCosminexus Service Architect",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_service_platform",
"@product": "uCosminexus Service Platform",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "5.0",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2006-000992",
"sec:references": [
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2969",
"@id": "CVE-2005-2969",
"@source": "CVE"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3352",
"@id": "CVE-2005-3352",
"@source": "CVE"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918",
"@id": "CVE-2006-3918",
"@source": "CVE"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0514",
"@id": "CVE-2007-0514",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-2969",
"@id": "CVE-2005-2969",
"@source": "NVD"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-3352",
"@id": "CVE-2005-3352",
"@source": "NVD"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3918",
"@id": "CVE-2006-3918",
"@source": "NVD"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0514",
"@id": "CVE-2007-0514",
"@source": "NVD"
},
{
"#text": "http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000992.html",
"@id": "JVNDB-2006-000992",
"@source": "JVNDB_Ja"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-79",
"@title": "Cross-site Scripting(CWE-79)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-noinfo",
"@title": "No Mapping(CWE-noinfo)"
}
],
"title": "Multiple Vulnerabilities Concerning Hitachi Web Server"
}
RHSA-2006:0618
Vulnerability from csaf_redhat - Published: 2006-08-08 19:50 - Updated: 2026-01-13 22:31Summary
Red Hat Security Advisory: apache security update
Severity
Important
Notes
Topic: Updated Apache httpd packages that correct a security issue are now
available for Red Hat Enterprise Linux 2.1.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details: The Apache HTTP Server is a popular Web server available for free.
A bug was found in Apache where an invalid Expect header sent to the server
was returned to the user in an unescaped error message. This could
allow an attacker to perform a cross-site scripting attack if a victim was
tricked into connecting to a site and sending a carefully crafted Expect
header. (CVE-2006-3918)
While a web browser cannot be forced to send an arbitrary Expect header by
a third-party attacker, it was recently discovered that certain versions of
the Flash plugin can manipulate request headers. If users running such
versions can be persuaded to load a web page with a malicious Flash applet,
a cross-site scripting attack against the server may be possible.
Users of Apache should upgrade to these updated packages, which contain a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
|
Red Hat Linux Advanced Workstation 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::aw
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2006:0618 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=200738 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2006-3918 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=200732 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-3918 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-3918 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Apache httpd packages that correct a security issue are now\navailable for Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Apache HTTP Server is a popular Web server available for free. \n\nA bug was found in Apache where an invalid Expect header sent to the server\nwas returned to the user in an unescaped error message. This could\nallow an attacker to perform a cross-site scripting attack if a victim was\ntricked into connecting to a site and sending a carefully crafted Expect\nheader. (CVE-2006-3918)\n\nWhile a web browser cannot be forced to send an arbitrary Expect header by\na third-party attacker, it was recently discovered that certain versions of\nthe Flash plugin can manipulate request headers. If users running such\nversions can be persuaded to load a web page with a malicious Flash applet,\na cross-site scripting attack against the server may be possible.\n\nUsers of Apache should upgrade to these updated packages, which contain a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0618",
"url": "https://access.redhat.com/errata/RHSA-2006:0618"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "200738",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200738"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0618.json"
}
],
"title": "Red Hat Security Advisory: apache security update",
"tracking": {
"current_release_date": "2026-01-13T22:31:59+00:00",
"generator": {
"date": "2026-01-13T22:31:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2006:0618",
"initial_release_date": "2006-08-08T19:50:00+00:00",
"revision_history": [
{
"date": "2006-08-08T19:50:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-08-08T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:31:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "Red Hat Linux Advanced Workstation 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "Red Hat Enterprise Linux ES version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "Red Hat Enterprise Linux WS version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-3918",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2006-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "200732"
}
],
"notes": [
{
"category": "description",
"text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Expect header XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1",
"Red Hat Linux Advanced Workstation 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3918"
},
{
"category": "external",
"summary": "RHBZ#200732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
}
],
"release_date": "2006-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-08-08T19:50:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1",
"Red Hat Linux Advanced Workstation 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0618"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Expect header XSS"
}
]
}
RHSA-2006:0619
Vulnerability from csaf_redhat - Published: 2006-08-10 20:55 - Updated: 2026-01-13 22:38Summary
Red Hat Security Advisory: httpd security update
Severity
Moderate
Notes
Topic: Updated Apache httpd packages that correct security issues and resolve bugs
are now available for Red Hat Enterprise Linux 3 and 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details: The Apache HTTP Server is a popular Web server available for free.
A bug was found in Apache where an invalid Expect header sent to the server
was returned to the user in an unescaped error message. This could
allow an attacker to perform a cross-site scripting attack if a victim was
tricked into connecting to a site and sending a carefully crafted Expect
header. (CVE-2006-3918)
While a web browser cannot be forced to send an arbitrary Expect
header by a third-party attacker, it was recently discovered that
certain versions of the Flash plugin can manipulate request headers.
If users running such versions can be persuaded to load a web page
with a malicious Flash applet, a cross-site scripting attack against
the server may be possible.
On Red Hat Enterprise Linux 3 and 4 systems, due to an unrelated issue in
the handling of malformed Expect headers, the page produced by the
cross-site scripting attack will only be returned after a timeout expires
(2-5 minutes by default) if not first canceled by the user.
Users of httpd should update to these erratum packages, which contain a
backported patch to correct these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
248 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-debuginfo-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:httpd-devel-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:mod_ssl-1:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-debuginfo-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:httpd-devel-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:mod_ssl-1:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-debuginfo-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:httpd-devel-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:mod_ssl-1:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-debuginfo-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:httpd-devel-0:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:mod_ssl-1:2.0.46-61.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-debuginfo-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-devel-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-manual-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:httpd-suexec-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:mod_ssl-1:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-debuginfo-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-devel-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-manual-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:httpd-suexec-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:mod_ssl-1:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-debuginfo-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-devel-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-manual-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:httpd-suexec-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:mod_ssl-1:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-debuginfo-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-devel-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-manual-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:httpd-suexec-0:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:mod_ssl-1:2.0.52-28.ent.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2006:0619 | self |
| http://www.redhat.com/security/updates/classifica… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=200732 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2006-3918 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=200732 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-3918 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-3918 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Apache httpd packages that correct security issues and resolve bugs\nare now available for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Apache HTTP Server is a popular Web server available for free.\n\nA bug was found in Apache where an invalid Expect header sent to the server\nwas returned to the user in an unescaped error message. This could\nallow an attacker to perform a cross-site scripting attack if a victim was\ntricked into connecting to a site and sending a carefully crafted Expect\nheader. (CVE-2006-3918)\n\nWhile a web browser cannot be forced to send an arbitrary Expect\nheader by a third-party attacker, it was recently discovered that\ncertain versions of the Flash plugin can manipulate request headers.\nIf users running such versions can be persuaded to load a web page\nwith a malicious Flash applet, a cross-site scripting attack against\nthe server may be possible.\n\nOn Red Hat Enterprise Linux 3 and 4 systems, due to an unrelated issue in\nthe handling of malformed Expect headers, the page produced by the\ncross-site scripting attack will only be returned after a timeout expires\n(2-5 minutes by default) if not first canceled by the user.\n\nUsers of httpd should update to these erratum packages, which contain a\nbackported patch to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0619",
"url": "https://access.redhat.com/errata/RHSA-2006:0619"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#moderate",
"url": "http://www.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "200732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0619.json"
}
],
"title": "Red Hat Security Advisory: httpd security update",
"tracking": {
"current_release_date": "2026-01-13T22:38:33+00:00",
"generator": {
"date": "2026-01-13T22:38:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2006:0619",
"initial_release_date": "2006-08-10T20:55:00+00:00",
"revision_history": [
{
"date": "2006-08-10T20:55:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-08-10T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:38:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.ia64",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.ia64",
"product_id": "mod_ssl-1:2.0.46-61.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.ia64",
"product": {
"name": "httpd-0:2.0.46-61.ent.ia64",
"product_id": "httpd-0:2.0.46-61.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.ia64",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.ia64",
"product_id": "httpd-devel-0:2.0.46-61.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.ia64",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.ia64",
"product_id": "mod_ssl-1:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=ia64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.ia64",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.ia64",
"product_id": "httpd-devel-0:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.ia64",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.ia64",
"product_id": "httpd-manual-0:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.ia64",
"product": {
"name": "httpd-0:2.0.52-28.ent.ia64",
"product_id": "httpd-0:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.ia64",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.ia64",
"product_id": "httpd-suexec-0:2.0.52-28.ent.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.x86_64",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.x86_64",
"product_id": "mod_ssl-1:2.0.46-61.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.x86_64",
"product": {
"name": "httpd-0:2.0.46-61.ent.x86_64",
"product_id": "httpd-0:2.0.46-61.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.x86_64",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.x86_64",
"product_id": "httpd-devel-0:2.0.46-61.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.x86_64",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.x86_64",
"product_id": "mod_ssl-1:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.x86_64",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.x86_64",
"product_id": "httpd-devel-0:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.x86_64",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.x86_64",
"product_id": "httpd-manual-0:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.x86_64",
"product": {
"name": "httpd-0:2.0.52-28.ent.x86_64",
"product_id": "httpd-0:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"product_id": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.i386",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.i386",
"product_id": "mod_ssl-1:2.0.46-61.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.i386",
"product": {
"name": "httpd-0:2.0.46-61.ent.i386",
"product_id": "httpd-0:2.0.46-61.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.i386",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.i386",
"product_id": "httpd-devel-0:2.0.46-61.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.i386",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.i386",
"product_id": "mod_ssl-1:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.i386",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.i386",
"product_id": "httpd-devel-0:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.i386",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.i386",
"product_id": "httpd-manual-0:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.i386",
"product": {
"name": "httpd-0:2.0.52-28.ent.i386",
"product_id": "httpd-0:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.i386",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.i386",
"product_id": "httpd-suexec-0:2.0.52-28.ent.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.src",
"product": {
"name": "httpd-0:2.0.46-61.ent.src",
"product_id": "httpd-0:2.0.46-61.ent.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.src",
"product": {
"name": "httpd-0:2.0.52-28.ent.src",
"product_id": "httpd-0:2.0.52-28.ent.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.ppc",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.ppc",
"product_id": "mod_ssl-1:2.0.46-61.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.ppc",
"product": {
"name": "httpd-0:2.0.46-61.ent.ppc",
"product_id": "httpd-0:2.0.46-61.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.ppc",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.ppc",
"product_id": "httpd-devel-0:2.0.46-61.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.ppc",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.ppc",
"product_id": "mod_ssl-1:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.ppc",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.ppc",
"product_id": "httpd-devel-0:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.ppc",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.ppc",
"product_id": "httpd-manual-0:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.ppc",
"product": {
"name": "httpd-0:2.0.52-28.ent.ppc",
"product_id": "httpd-0:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.ppc",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.ppc",
"product_id": "httpd-suexec-0:2.0.52-28.ent.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.s390x",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.s390x",
"product_id": "mod_ssl-1:2.0.46-61.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.s390x",
"product": {
"name": "httpd-0:2.0.46-61.ent.s390x",
"product_id": "httpd-0:2.0.46-61.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.s390x",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.s390x",
"product_id": "httpd-devel-0:2.0.46-61.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.s390x",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.s390x",
"product_id": "mod_ssl-1:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.s390x",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.s390x",
"product_id": "httpd-devel-0:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.s390x",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.s390x",
"product_id": "httpd-manual-0:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.s390x",
"product": {
"name": "httpd-0:2.0.52-28.ent.s390x",
"product_id": "httpd-0:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.s390x",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390x",
"product_id": "httpd-suexec-0:2.0.52-28.ent.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.0.46-61.ent.s390",
"product": {
"name": "mod_ssl-1:2.0.46-61.ent.s390",
"product_id": "mod_ssl-1:2.0.46-61.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.46-61.ent?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"product": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"product_id": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.46-61.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.46-61.ent.s390",
"product": {
"name": "httpd-0:2.0.46-61.ent.s390",
"product_id": "httpd-0:2.0.46-61.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.46-61.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.46-61.ent.s390",
"product": {
"name": "httpd-devel-0:2.0.46-61.ent.s390",
"product_id": "httpd-devel-0:2.0.46-61.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.46-61.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.0.52-28.ent.s390",
"product": {
"name": "mod_ssl-1:2.0.52-28.ent.s390",
"product_id": "mod_ssl-1:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.0.52-28.ent?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.0.52-28.ent.s390",
"product": {
"name": "httpd-devel-0:2.0.52-28.ent.s390",
"product_id": "httpd-devel-0:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.0.52-28.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"product": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"product_id": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.0.52-28.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.0.52-28.ent.s390",
"product": {
"name": "httpd-manual-0:2.0.52-28.ent.s390",
"product_id": "httpd-manual-0:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.0.52-28.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.0.52-28.ent.s390",
"product": {
"name": "httpd-0:2.0.52-28.ent.s390",
"product_id": "httpd-0:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.0.52-28.ent?arch=s390"
}
}
},
{
"category": "product_version",
"name": "httpd-suexec-0:2.0.52-28.ent.s390",
"product": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390",
"product_id": "httpd-suexec-0:2.0.52-28.ent.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-suexec@2.0.52-28.ent?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.src"
},
"product_reference": "httpd-0:2.0.46-61.ent.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-debuginfo-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:httpd-devel-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:mod_ssl-1:2.0.46-61.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.src"
},
"product_reference": "httpd-0:2.0.46-61.ent.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-debuginfo-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:httpd-devel-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:mod_ssl-1:2.0.46-61.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.src"
},
"product_reference": "httpd-0:2.0.46-61.ent.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-debuginfo-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:httpd-devel-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:mod_ssl-1:2.0.46-61.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.src"
},
"product_reference": "httpd-0:2.0.46-61.ent.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-debuginfo-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:httpd-devel-0:2.0.46-61.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.46-61.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:mod_ssl-1:2.0.46-61.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.46-61.ent.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.src"
},
"product_reference": "httpd-0:2.0.52-28.ent.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-debuginfo-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-devel-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-manual-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:httpd-suexec-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:mod_ssl-1:2.0.52-28.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.src"
},
"product_reference": "httpd-0:2.0.52-28.ent.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-debuginfo-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-devel-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-manual-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:httpd-suexec-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:mod_ssl-1:2.0.52-28.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.src"
},
"product_reference": "httpd-0:2.0.52-28.ent.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-debuginfo-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-devel-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-manual-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:httpd-suexec-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:mod_ssl-1:2.0.52-28.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.src"
},
"product_reference": "httpd-0:2.0.52-28.ent.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-debuginfo-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-devel-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-devel-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-manual-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-manual-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.i386"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.ia64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.ppc"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.s390"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.s390x"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-suexec-0:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:httpd-suexec-0:2.0.52-28.ent.x86_64"
},
"product_reference": "httpd-suexec-0:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.i386"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.ia64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.ppc"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.s390"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.s390x"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.0.52-28.ent.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:mod_ssl-1:2.0.52-28.ent.x86_64"
},
"product_reference": "mod_ssl-1:2.0.52-28.ent.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-3918",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2006-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "200732"
}
],
"notes": [
{
"category": "description",
"text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Expect header XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:httpd-0:2.0.46-61.ent.i386",
"3AS:httpd-0:2.0.46-61.ent.ia64",
"3AS:httpd-0:2.0.46-61.ent.ppc",
"3AS:httpd-0:2.0.46-61.ent.s390",
"3AS:httpd-0:2.0.46-61.ent.s390x",
"3AS:httpd-0:2.0.46-61.ent.src",
"3AS:httpd-0:2.0.46-61.ent.x86_64",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3AS:httpd-devel-0:2.0.46-61.ent.i386",
"3AS:httpd-devel-0:2.0.46-61.ent.ia64",
"3AS:httpd-devel-0:2.0.46-61.ent.ppc",
"3AS:httpd-devel-0:2.0.46-61.ent.s390",
"3AS:httpd-devel-0:2.0.46-61.ent.s390x",
"3AS:httpd-devel-0:2.0.46-61.ent.x86_64",
"3AS:mod_ssl-1:2.0.46-61.ent.i386",
"3AS:mod_ssl-1:2.0.46-61.ent.ia64",
"3AS:mod_ssl-1:2.0.46-61.ent.ppc",
"3AS:mod_ssl-1:2.0.46-61.ent.s390",
"3AS:mod_ssl-1:2.0.46-61.ent.s390x",
"3AS:mod_ssl-1:2.0.46-61.ent.x86_64",
"3Desktop:httpd-0:2.0.46-61.ent.i386",
"3Desktop:httpd-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-0:2.0.46-61.ent.s390",
"3Desktop:httpd-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-0:2.0.46-61.ent.src",
"3Desktop:httpd-0:2.0.46-61.ent.x86_64",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3Desktop:httpd-devel-0:2.0.46-61.ent.i386",
"3Desktop:httpd-devel-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-devel-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-devel-0:2.0.46-61.ent.s390",
"3Desktop:httpd-devel-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-devel-0:2.0.46-61.ent.x86_64",
"3Desktop:mod_ssl-1:2.0.46-61.ent.i386",
"3Desktop:mod_ssl-1:2.0.46-61.ent.ia64",
"3Desktop:mod_ssl-1:2.0.46-61.ent.ppc",
"3Desktop:mod_ssl-1:2.0.46-61.ent.s390",
"3Desktop:mod_ssl-1:2.0.46-61.ent.s390x",
"3Desktop:mod_ssl-1:2.0.46-61.ent.x86_64",
"3ES:httpd-0:2.0.46-61.ent.i386",
"3ES:httpd-0:2.0.46-61.ent.ia64",
"3ES:httpd-0:2.0.46-61.ent.ppc",
"3ES:httpd-0:2.0.46-61.ent.s390",
"3ES:httpd-0:2.0.46-61.ent.s390x",
"3ES:httpd-0:2.0.46-61.ent.src",
"3ES:httpd-0:2.0.46-61.ent.x86_64",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3ES:httpd-devel-0:2.0.46-61.ent.i386",
"3ES:httpd-devel-0:2.0.46-61.ent.ia64",
"3ES:httpd-devel-0:2.0.46-61.ent.ppc",
"3ES:httpd-devel-0:2.0.46-61.ent.s390",
"3ES:httpd-devel-0:2.0.46-61.ent.s390x",
"3ES:httpd-devel-0:2.0.46-61.ent.x86_64",
"3ES:mod_ssl-1:2.0.46-61.ent.i386",
"3ES:mod_ssl-1:2.0.46-61.ent.ia64",
"3ES:mod_ssl-1:2.0.46-61.ent.ppc",
"3ES:mod_ssl-1:2.0.46-61.ent.s390",
"3ES:mod_ssl-1:2.0.46-61.ent.s390x",
"3ES:mod_ssl-1:2.0.46-61.ent.x86_64",
"3WS:httpd-0:2.0.46-61.ent.i386",
"3WS:httpd-0:2.0.46-61.ent.ia64",
"3WS:httpd-0:2.0.46-61.ent.ppc",
"3WS:httpd-0:2.0.46-61.ent.s390",
"3WS:httpd-0:2.0.46-61.ent.s390x",
"3WS:httpd-0:2.0.46-61.ent.src",
"3WS:httpd-0:2.0.46-61.ent.x86_64",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3WS:httpd-devel-0:2.0.46-61.ent.i386",
"3WS:httpd-devel-0:2.0.46-61.ent.ia64",
"3WS:httpd-devel-0:2.0.46-61.ent.ppc",
"3WS:httpd-devel-0:2.0.46-61.ent.s390",
"3WS:httpd-devel-0:2.0.46-61.ent.s390x",
"3WS:httpd-devel-0:2.0.46-61.ent.x86_64",
"3WS:mod_ssl-1:2.0.46-61.ent.i386",
"3WS:mod_ssl-1:2.0.46-61.ent.ia64",
"3WS:mod_ssl-1:2.0.46-61.ent.ppc",
"3WS:mod_ssl-1:2.0.46-61.ent.s390",
"3WS:mod_ssl-1:2.0.46-61.ent.s390x",
"3WS:mod_ssl-1:2.0.46-61.ent.x86_64",
"4AS:httpd-0:2.0.52-28.ent.i386",
"4AS:httpd-0:2.0.52-28.ent.ia64",
"4AS:httpd-0:2.0.52-28.ent.ppc",
"4AS:httpd-0:2.0.52-28.ent.s390",
"4AS:httpd-0:2.0.52-28.ent.s390x",
"4AS:httpd-0:2.0.52-28.ent.src",
"4AS:httpd-0:2.0.52-28.ent.x86_64",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4AS:httpd-devel-0:2.0.52-28.ent.i386",
"4AS:httpd-devel-0:2.0.52-28.ent.ia64",
"4AS:httpd-devel-0:2.0.52-28.ent.ppc",
"4AS:httpd-devel-0:2.0.52-28.ent.s390",
"4AS:httpd-devel-0:2.0.52-28.ent.s390x",
"4AS:httpd-devel-0:2.0.52-28.ent.x86_64",
"4AS:httpd-manual-0:2.0.52-28.ent.i386",
"4AS:httpd-manual-0:2.0.52-28.ent.ia64",
"4AS:httpd-manual-0:2.0.52-28.ent.ppc",
"4AS:httpd-manual-0:2.0.52-28.ent.s390",
"4AS:httpd-manual-0:2.0.52-28.ent.s390x",
"4AS:httpd-manual-0:2.0.52-28.ent.x86_64",
"4AS:httpd-suexec-0:2.0.52-28.ent.i386",
"4AS:httpd-suexec-0:2.0.52-28.ent.ia64",
"4AS:httpd-suexec-0:2.0.52-28.ent.ppc",
"4AS:httpd-suexec-0:2.0.52-28.ent.s390",
"4AS:httpd-suexec-0:2.0.52-28.ent.s390x",
"4AS:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4AS:mod_ssl-1:2.0.52-28.ent.i386",
"4AS:mod_ssl-1:2.0.52-28.ent.ia64",
"4AS:mod_ssl-1:2.0.52-28.ent.ppc",
"4AS:mod_ssl-1:2.0.52-28.ent.s390",
"4AS:mod_ssl-1:2.0.52-28.ent.s390x",
"4AS:mod_ssl-1:2.0.52-28.ent.x86_64",
"4Desktop:httpd-0:2.0.52-28.ent.i386",
"4Desktop:httpd-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-0:2.0.52-28.ent.s390",
"4Desktop:httpd-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-0:2.0.52-28.ent.src",
"4Desktop:httpd-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-devel-0:2.0.52-28.ent.i386",
"4Desktop:httpd-devel-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-devel-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-devel-0:2.0.52-28.ent.s390",
"4Desktop:httpd-devel-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-devel-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-manual-0:2.0.52-28.ent.i386",
"4Desktop:httpd-manual-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-manual-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-manual-0:2.0.52-28.ent.s390",
"4Desktop:httpd-manual-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-manual-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.i386",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.s390",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4Desktop:mod_ssl-1:2.0.52-28.ent.i386",
"4Desktop:mod_ssl-1:2.0.52-28.ent.ia64",
"4Desktop:mod_ssl-1:2.0.52-28.ent.ppc",
"4Desktop:mod_ssl-1:2.0.52-28.ent.s390",
"4Desktop:mod_ssl-1:2.0.52-28.ent.s390x",
"4Desktop:mod_ssl-1:2.0.52-28.ent.x86_64",
"4ES:httpd-0:2.0.52-28.ent.i386",
"4ES:httpd-0:2.0.52-28.ent.ia64",
"4ES:httpd-0:2.0.52-28.ent.ppc",
"4ES:httpd-0:2.0.52-28.ent.s390",
"4ES:httpd-0:2.0.52-28.ent.s390x",
"4ES:httpd-0:2.0.52-28.ent.src",
"4ES:httpd-0:2.0.52-28.ent.x86_64",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4ES:httpd-devel-0:2.0.52-28.ent.i386",
"4ES:httpd-devel-0:2.0.52-28.ent.ia64",
"4ES:httpd-devel-0:2.0.52-28.ent.ppc",
"4ES:httpd-devel-0:2.0.52-28.ent.s390",
"4ES:httpd-devel-0:2.0.52-28.ent.s390x",
"4ES:httpd-devel-0:2.0.52-28.ent.x86_64",
"4ES:httpd-manual-0:2.0.52-28.ent.i386",
"4ES:httpd-manual-0:2.0.52-28.ent.ia64",
"4ES:httpd-manual-0:2.0.52-28.ent.ppc",
"4ES:httpd-manual-0:2.0.52-28.ent.s390",
"4ES:httpd-manual-0:2.0.52-28.ent.s390x",
"4ES:httpd-manual-0:2.0.52-28.ent.x86_64",
"4ES:httpd-suexec-0:2.0.52-28.ent.i386",
"4ES:httpd-suexec-0:2.0.52-28.ent.ia64",
"4ES:httpd-suexec-0:2.0.52-28.ent.ppc",
"4ES:httpd-suexec-0:2.0.52-28.ent.s390",
"4ES:httpd-suexec-0:2.0.52-28.ent.s390x",
"4ES:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4ES:mod_ssl-1:2.0.52-28.ent.i386",
"4ES:mod_ssl-1:2.0.52-28.ent.ia64",
"4ES:mod_ssl-1:2.0.52-28.ent.ppc",
"4ES:mod_ssl-1:2.0.52-28.ent.s390",
"4ES:mod_ssl-1:2.0.52-28.ent.s390x",
"4ES:mod_ssl-1:2.0.52-28.ent.x86_64",
"4WS:httpd-0:2.0.52-28.ent.i386",
"4WS:httpd-0:2.0.52-28.ent.ia64",
"4WS:httpd-0:2.0.52-28.ent.ppc",
"4WS:httpd-0:2.0.52-28.ent.s390",
"4WS:httpd-0:2.0.52-28.ent.s390x",
"4WS:httpd-0:2.0.52-28.ent.src",
"4WS:httpd-0:2.0.52-28.ent.x86_64",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4WS:httpd-devel-0:2.0.52-28.ent.i386",
"4WS:httpd-devel-0:2.0.52-28.ent.ia64",
"4WS:httpd-devel-0:2.0.52-28.ent.ppc",
"4WS:httpd-devel-0:2.0.52-28.ent.s390",
"4WS:httpd-devel-0:2.0.52-28.ent.s390x",
"4WS:httpd-devel-0:2.0.52-28.ent.x86_64",
"4WS:httpd-manual-0:2.0.52-28.ent.i386",
"4WS:httpd-manual-0:2.0.52-28.ent.ia64",
"4WS:httpd-manual-0:2.0.52-28.ent.ppc",
"4WS:httpd-manual-0:2.0.52-28.ent.s390",
"4WS:httpd-manual-0:2.0.52-28.ent.s390x",
"4WS:httpd-manual-0:2.0.52-28.ent.x86_64",
"4WS:httpd-suexec-0:2.0.52-28.ent.i386",
"4WS:httpd-suexec-0:2.0.52-28.ent.ia64",
"4WS:httpd-suexec-0:2.0.52-28.ent.ppc",
"4WS:httpd-suexec-0:2.0.52-28.ent.s390",
"4WS:httpd-suexec-0:2.0.52-28.ent.s390x",
"4WS:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4WS:mod_ssl-1:2.0.52-28.ent.i386",
"4WS:mod_ssl-1:2.0.52-28.ent.ia64",
"4WS:mod_ssl-1:2.0.52-28.ent.ppc",
"4WS:mod_ssl-1:2.0.52-28.ent.s390",
"4WS:mod_ssl-1:2.0.52-28.ent.s390x",
"4WS:mod_ssl-1:2.0.52-28.ent.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3918"
},
{
"category": "external",
"summary": "RHBZ#200732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
}
],
"release_date": "2006-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-08-10T20:55:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"3AS:httpd-0:2.0.46-61.ent.i386",
"3AS:httpd-0:2.0.46-61.ent.ia64",
"3AS:httpd-0:2.0.46-61.ent.ppc",
"3AS:httpd-0:2.0.46-61.ent.s390",
"3AS:httpd-0:2.0.46-61.ent.s390x",
"3AS:httpd-0:2.0.46-61.ent.src",
"3AS:httpd-0:2.0.46-61.ent.x86_64",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3AS:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3AS:httpd-devel-0:2.0.46-61.ent.i386",
"3AS:httpd-devel-0:2.0.46-61.ent.ia64",
"3AS:httpd-devel-0:2.0.46-61.ent.ppc",
"3AS:httpd-devel-0:2.0.46-61.ent.s390",
"3AS:httpd-devel-0:2.0.46-61.ent.s390x",
"3AS:httpd-devel-0:2.0.46-61.ent.x86_64",
"3AS:mod_ssl-1:2.0.46-61.ent.i386",
"3AS:mod_ssl-1:2.0.46-61.ent.ia64",
"3AS:mod_ssl-1:2.0.46-61.ent.ppc",
"3AS:mod_ssl-1:2.0.46-61.ent.s390",
"3AS:mod_ssl-1:2.0.46-61.ent.s390x",
"3AS:mod_ssl-1:2.0.46-61.ent.x86_64",
"3Desktop:httpd-0:2.0.46-61.ent.i386",
"3Desktop:httpd-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-0:2.0.46-61.ent.s390",
"3Desktop:httpd-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-0:2.0.46-61.ent.src",
"3Desktop:httpd-0:2.0.46-61.ent.x86_64",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3Desktop:httpd-devel-0:2.0.46-61.ent.i386",
"3Desktop:httpd-devel-0:2.0.46-61.ent.ia64",
"3Desktop:httpd-devel-0:2.0.46-61.ent.ppc",
"3Desktop:httpd-devel-0:2.0.46-61.ent.s390",
"3Desktop:httpd-devel-0:2.0.46-61.ent.s390x",
"3Desktop:httpd-devel-0:2.0.46-61.ent.x86_64",
"3Desktop:mod_ssl-1:2.0.46-61.ent.i386",
"3Desktop:mod_ssl-1:2.0.46-61.ent.ia64",
"3Desktop:mod_ssl-1:2.0.46-61.ent.ppc",
"3Desktop:mod_ssl-1:2.0.46-61.ent.s390",
"3Desktop:mod_ssl-1:2.0.46-61.ent.s390x",
"3Desktop:mod_ssl-1:2.0.46-61.ent.x86_64",
"3ES:httpd-0:2.0.46-61.ent.i386",
"3ES:httpd-0:2.0.46-61.ent.ia64",
"3ES:httpd-0:2.0.46-61.ent.ppc",
"3ES:httpd-0:2.0.46-61.ent.s390",
"3ES:httpd-0:2.0.46-61.ent.s390x",
"3ES:httpd-0:2.0.46-61.ent.src",
"3ES:httpd-0:2.0.46-61.ent.x86_64",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3ES:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3ES:httpd-devel-0:2.0.46-61.ent.i386",
"3ES:httpd-devel-0:2.0.46-61.ent.ia64",
"3ES:httpd-devel-0:2.0.46-61.ent.ppc",
"3ES:httpd-devel-0:2.0.46-61.ent.s390",
"3ES:httpd-devel-0:2.0.46-61.ent.s390x",
"3ES:httpd-devel-0:2.0.46-61.ent.x86_64",
"3ES:mod_ssl-1:2.0.46-61.ent.i386",
"3ES:mod_ssl-1:2.0.46-61.ent.ia64",
"3ES:mod_ssl-1:2.0.46-61.ent.ppc",
"3ES:mod_ssl-1:2.0.46-61.ent.s390",
"3ES:mod_ssl-1:2.0.46-61.ent.s390x",
"3ES:mod_ssl-1:2.0.46-61.ent.x86_64",
"3WS:httpd-0:2.0.46-61.ent.i386",
"3WS:httpd-0:2.0.46-61.ent.ia64",
"3WS:httpd-0:2.0.46-61.ent.ppc",
"3WS:httpd-0:2.0.46-61.ent.s390",
"3WS:httpd-0:2.0.46-61.ent.s390x",
"3WS:httpd-0:2.0.46-61.ent.src",
"3WS:httpd-0:2.0.46-61.ent.x86_64",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.i386",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.ia64",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.ppc",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.s390",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.s390x",
"3WS:httpd-debuginfo-0:2.0.46-61.ent.x86_64",
"3WS:httpd-devel-0:2.0.46-61.ent.i386",
"3WS:httpd-devel-0:2.0.46-61.ent.ia64",
"3WS:httpd-devel-0:2.0.46-61.ent.ppc",
"3WS:httpd-devel-0:2.0.46-61.ent.s390",
"3WS:httpd-devel-0:2.0.46-61.ent.s390x",
"3WS:httpd-devel-0:2.0.46-61.ent.x86_64",
"3WS:mod_ssl-1:2.0.46-61.ent.i386",
"3WS:mod_ssl-1:2.0.46-61.ent.ia64",
"3WS:mod_ssl-1:2.0.46-61.ent.ppc",
"3WS:mod_ssl-1:2.0.46-61.ent.s390",
"3WS:mod_ssl-1:2.0.46-61.ent.s390x",
"3WS:mod_ssl-1:2.0.46-61.ent.x86_64",
"4AS:httpd-0:2.0.52-28.ent.i386",
"4AS:httpd-0:2.0.52-28.ent.ia64",
"4AS:httpd-0:2.0.52-28.ent.ppc",
"4AS:httpd-0:2.0.52-28.ent.s390",
"4AS:httpd-0:2.0.52-28.ent.s390x",
"4AS:httpd-0:2.0.52-28.ent.src",
"4AS:httpd-0:2.0.52-28.ent.x86_64",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4AS:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4AS:httpd-devel-0:2.0.52-28.ent.i386",
"4AS:httpd-devel-0:2.0.52-28.ent.ia64",
"4AS:httpd-devel-0:2.0.52-28.ent.ppc",
"4AS:httpd-devel-0:2.0.52-28.ent.s390",
"4AS:httpd-devel-0:2.0.52-28.ent.s390x",
"4AS:httpd-devel-0:2.0.52-28.ent.x86_64",
"4AS:httpd-manual-0:2.0.52-28.ent.i386",
"4AS:httpd-manual-0:2.0.52-28.ent.ia64",
"4AS:httpd-manual-0:2.0.52-28.ent.ppc",
"4AS:httpd-manual-0:2.0.52-28.ent.s390",
"4AS:httpd-manual-0:2.0.52-28.ent.s390x",
"4AS:httpd-manual-0:2.0.52-28.ent.x86_64",
"4AS:httpd-suexec-0:2.0.52-28.ent.i386",
"4AS:httpd-suexec-0:2.0.52-28.ent.ia64",
"4AS:httpd-suexec-0:2.0.52-28.ent.ppc",
"4AS:httpd-suexec-0:2.0.52-28.ent.s390",
"4AS:httpd-suexec-0:2.0.52-28.ent.s390x",
"4AS:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4AS:mod_ssl-1:2.0.52-28.ent.i386",
"4AS:mod_ssl-1:2.0.52-28.ent.ia64",
"4AS:mod_ssl-1:2.0.52-28.ent.ppc",
"4AS:mod_ssl-1:2.0.52-28.ent.s390",
"4AS:mod_ssl-1:2.0.52-28.ent.s390x",
"4AS:mod_ssl-1:2.0.52-28.ent.x86_64",
"4Desktop:httpd-0:2.0.52-28.ent.i386",
"4Desktop:httpd-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-0:2.0.52-28.ent.s390",
"4Desktop:httpd-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-0:2.0.52-28.ent.src",
"4Desktop:httpd-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-devel-0:2.0.52-28.ent.i386",
"4Desktop:httpd-devel-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-devel-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-devel-0:2.0.52-28.ent.s390",
"4Desktop:httpd-devel-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-devel-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-manual-0:2.0.52-28.ent.i386",
"4Desktop:httpd-manual-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-manual-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-manual-0:2.0.52-28.ent.s390",
"4Desktop:httpd-manual-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-manual-0:2.0.52-28.ent.x86_64",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.i386",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.ia64",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.ppc",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.s390",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.s390x",
"4Desktop:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4Desktop:mod_ssl-1:2.0.52-28.ent.i386",
"4Desktop:mod_ssl-1:2.0.52-28.ent.ia64",
"4Desktop:mod_ssl-1:2.0.52-28.ent.ppc",
"4Desktop:mod_ssl-1:2.0.52-28.ent.s390",
"4Desktop:mod_ssl-1:2.0.52-28.ent.s390x",
"4Desktop:mod_ssl-1:2.0.52-28.ent.x86_64",
"4ES:httpd-0:2.0.52-28.ent.i386",
"4ES:httpd-0:2.0.52-28.ent.ia64",
"4ES:httpd-0:2.0.52-28.ent.ppc",
"4ES:httpd-0:2.0.52-28.ent.s390",
"4ES:httpd-0:2.0.52-28.ent.s390x",
"4ES:httpd-0:2.0.52-28.ent.src",
"4ES:httpd-0:2.0.52-28.ent.x86_64",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4ES:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4ES:httpd-devel-0:2.0.52-28.ent.i386",
"4ES:httpd-devel-0:2.0.52-28.ent.ia64",
"4ES:httpd-devel-0:2.0.52-28.ent.ppc",
"4ES:httpd-devel-0:2.0.52-28.ent.s390",
"4ES:httpd-devel-0:2.0.52-28.ent.s390x",
"4ES:httpd-devel-0:2.0.52-28.ent.x86_64",
"4ES:httpd-manual-0:2.0.52-28.ent.i386",
"4ES:httpd-manual-0:2.0.52-28.ent.ia64",
"4ES:httpd-manual-0:2.0.52-28.ent.ppc",
"4ES:httpd-manual-0:2.0.52-28.ent.s390",
"4ES:httpd-manual-0:2.0.52-28.ent.s390x",
"4ES:httpd-manual-0:2.0.52-28.ent.x86_64",
"4ES:httpd-suexec-0:2.0.52-28.ent.i386",
"4ES:httpd-suexec-0:2.0.52-28.ent.ia64",
"4ES:httpd-suexec-0:2.0.52-28.ent.ppc",
"4ES:httpd-suexec-0:2.0.52-28.ent.s390",
"4ES:httpd-suexec-0:2.0.52-28.ent.s390x",
"4ES:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4ES:mod_ssl-1:2.0.52-28.ent.i386",
"4ES:mod_ssl-1:2.0.52-28.ent.ia64",
"4ES:mod_ssl-1:2.0.52-28.ent.ppc",
"4ES:mod_ssl-1:2.0.52-28.ent.s390",
"4ES:mod_ssl-1:2.0.52-28.ent.s390x",
"4ES:mod_ssl-1:2.0.52-28.ent.x86_64",
"4WS:httpd-0:2.0.52-28.ent.i386",
"4WS:httpd-0:2.0.52-28.ent.ia64",
"4WS:httpd-0:2.0.52-28.ent.ppc",
"4WS:httpd-0:2.0.52-28.ent.s390",
"4WS:httpd-0:2.0.52-28.ent.s390x",
"4WS:httpd-0:2.0.52-28.ent.src",
"4WS:httpd-0:2.0.52-28.ent.x86_64",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.i386",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.ia64",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.ppc",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.s390",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.s390x",
"4WS:httpd-debuginfo-0:2.0.52-28.ent.x86_64",
"4WS:httpd-devel-0:2.0.52-28.ent.i386",
"4WS:httpd-devel-0:2.0.52-28.ent.ia64",
"4WS:httpd-devel-0:2.0.52-28.ent.ppc",
"4WS:httpd-devel-0:2.0.52-28.ent.s390",
"4WS:httpd-devel-0:2.0.52-28.ent.s390x",
"4WS:httpd-devel-0:2.0.52-28.ent.x86_64",
"4WS:httpd-manual-0:2.0.52-28.ent.i386",
"4WS:httpd-manual-0:2.0.52-28.ent.ia64",
"4WS:httpd-manual-0:2.0.52-28.ent.ppc",
"4WS:httpd-manual-0:2.0.52-28.ent.s390",
"4WS:httpd-manual-0:2.0.52-28.ent.s390x",
"4WS:httpd-manual-0:2.0.52-28.ent.x86_64",
"4WS:httpd-suexec-0:2.0.52-28.ent.i386",
"4WS:httpd-suexec-0:2.0.52-28.ent.ia64",
"4WS:httpd-suexec-0:2.0.52-28.ent.ppc",
"4WS:httpd-suexec-0:2.0.52-28.ent.s390",
"4WS:httpd-suexec-0:2.0.52-28.ent.s390x",
"4WS:httpd-suexec-0:2.0.52-28.ent.x86_64",
"4WS:mod_ssl-1:2.0.52-28.ent.i386",
"4WS:mod_ssl-1:2.0.52-28.ent.ia64",
"4WS:mod_ssl-1:2.0.52-28.ent.ppc",
"4WS:mod_ssl-1:2.0.52-28.ent.s390",
"4WS:mod_ssl-1:2.0.52-28.ent.s390x",
"4WS:mod_ssl-1:2.0.52-28.ent.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0619"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Expect header XSS"
}
]
}
RHSA-2006:0692
Vulnerability from csaf_redhat - Published: 2006-09-29 15:47 - Updated: 2026-01-13 22:08Summary
Red Hat Security Advisory: apache security update for Stronghold
Severity
Important
Notes
Topic: An updated version of Apache that addresses several security issues is now
available for Stronghold 4.0 for Enterprise Linux.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details: The Apache HTTP server is a powerful, full-featured, efficient, and
freely-available Web server.
A bug was found in Apache where an invalid Expect header sent to the server
was returned to the user in an unescaped error message. This could
allow an attacker to perform a cross-site scripting attack if a victim was
tricked into connecting to a site and sending a carefully crafted Expect
header. (CVE-2006-3918)
While a web browser cannot be forced to send an arbitrary Expect header by
a third-party attacker, it was recently discovered that certain versions of
the Flash plugin can manipulate request headers. If users running such
versions can be persuaded to load a web page with a malicious Flash applet,
a cross-site scripting attack against the server may be possible.
A flaw in mod_imap when using the Referer directive with image maps was
discovered. With certain site configurations, a remote attacker could
perform a cross-site scripting attack if a victim can be forced to visit a
malicious URL using certain web browsers. (CVE-2005-3352)
Users of Stronghold should upgrade to these updated packages, which
contain a backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)
Red Hat / Stronghold 4.0 for Red Hat Enterprise Linux
|
cpe:/a:redhat:rhel_stronghold:4.0
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)
Red Hat / Stronghold 4.0 for Red Hat Enterprise Linux
|
cpe:/a:redhat:rhel_stronghold:4.0
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
12 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2006:0692 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=207922 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2005-3352 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=430524 | external |
| https://www.cve.org/CVERecord?id=CVE-2005-3352 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2005-3352 | external |
| https://access.redhat.com/security/cve/CVE-2006-3918 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=200732 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-3918 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-3918 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated version of Apache that addresses several security issues is now\navailable for Stronghold 4.0 for Enterprise Linux.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Apache HTTP server is a powerful, full-featured, efficient, and\nfreely-available Web server.\n\nA bug was found in Apache where an invalid Expect header sent to the server\nwas returned to the user in an unescaped error message. This could\nallow an attacker to perform a cross-site scripting attack if a victim was\ntricked into connecting to a site and sending a carefully crafted Expect\nheader. (CVE-2006-3918)\n\nWhile a web browser cannot be forced to send an arbitrary Expect header by\na third-party attacker, it was recently discovered that certain versions of\nthe Flash plugin can manipulate request headers. If users running such\nversions can be persuaded to load a web page with a malicious Flash applet,\na cross-site scripting attack against the server may be possible.\n\nA flaw in mod_imap when using the Referer directive with image maps was\ndiscovered. With certain site configurations, a remote attacker could\nperform a cross-site scripting attack if a victim can be forced to visit a\nmalicious URL using certain web browsers. (CVE-2005-3352)\n\nUsers of Stronghold should upgrade to these updated packages, which \ncontain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0692",
"url": "https://access.redhat.com/errata/RHSA-2006:0692"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "207922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=207922"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0692.json"
}
],
"title": "Red Hat Security Advisory: apache security update for Stronghold",
"tracking": {
"current_release_date": "2026-01-13T22:08:34+00:00",
"generator": {
"date": "2026-01-13T22:08:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2006:0692",
"initial_release_date": "2006-09-29T15:47:00+00:00",
"revision_history": [
{
"date": "2006-09-29T15:47:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-09-29T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:08:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)",
"product": {
"name": "Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)",
"product_id": "Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_stronghold:4.0"
}
}
}
],
"category": "product_family",
"name": "Stronghold 4.0 for Red Hat Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-3352",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2005-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430524"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd cross-site scripting flaw in mod_imap",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-3352"
},
{
"category": "external",
"summary": "RHBZ#430524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352"
}
],
"release_date": "2005-12-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-09-29T15:47:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0692"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd cross-site scripting flaw in mod_imap"
},
{
"cve": "CVE-2006-3918",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2006-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "200732"
}
],
"notes": [
{
"category": "description",
"text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Expect header XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3918"
},
{
"category": "external",
"summary": "RHBZ#200732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
}
],
"release_date": "2006-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-09-29T15:47:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0692"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Expect header XSS"
}
]
}
RHSA-2008:0523
Vulnerability from csaf_redhat - Published: 2008-06-30 15:29 - Updated: 2026-01-13 22:36Summary
Red Hat Security Advisory: Red Hat Network Proxy Server security update
Severity
Low
Notes
Topic: Red Hat Network Proxy Server version 4.2.3 is now available. This update
includes fixes for a number of security issues in Red Hat Network Proxy
Server components.
This update has been rated as having low security impact by the Red
Hat Security Response Team.
Details: The Red Hat Network Proxy Server 4.2.3 release corrects several security
vulnerabilities in several shipped components. In a typical operating
environment, these components are not exposed to users of Proxy Server in a
vulnerable manner. These security updates will reduce risk in unique Proxy
Server environments.
Multiple flaws were fixed in the Apache HTTPD server. These flaws could
result in a cross-site scripting or denial-of-service attack.
(CVE-2007-6388, CVE-2007-5000, CVE-2007-4465, CVE-2007-3304, CVE-2006-5752,
CVE-2006-3918, CVE-2005-3352)
A denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)
Multiple flaws in mod_ssl. (CVE-2004-0488, CVE-2004-0700, CVE-2004-0885)
A denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)
Users of Red Hat Network Proxy Server 4.2 are advised to upgrade to 4.2.3,
which resolves these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Important
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
52 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2008:0523 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=449336 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2004-0488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=430867 | external |
| https://www.cve.org/CVERecord?id=CVE-2004-0488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2004-0488 | external |
| https://access.redhat.com/security/cve/CVE-2004-0700 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=430866 | external |
| https://www.cve.org/CVERecord?id=CVE-2004-0700 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2004-0700 | external |
| https://access.redhat.com/security/cve/CVE-2004-0885 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=430637 | external |
| https://www.cve.org/CVERecord?id=CVE-2004-0885 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2004-0885 | external |
| https://access.redhat.com/security/cve/CVE-2005-3352 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=430524 | external |
| https://www.cve.org/CVERecord?id=CVE-2005-3352 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2005-3352 | external |
| https://access.redhat.com/security/cve/CVE-2006-1329 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=429254 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-1329 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-1329 | external |
| https://access.redhat.com/security/cve/CVE-2006-3918 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=200732 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-3918 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-3918 | external |
| https://access.redhat.com/security/cve/CVE-2006-5752 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=245112 | external |
| https://www.cve.org/CVERecord?id=CVE-2006-5752 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2006-5752 | external |
| https://access.redhat.com/security/cve/CVE-2007-1349 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=240423 | external |
| https://www.cve.org/CVERecord?id=CVE-2007-1349 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2007-1349 | external |
| https://access.redhat.com/security/cve/CVE-2007-3304 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=245111 | external |
| https://www.cve.org/CVERecord?id=CVE-2007-3304 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2007-3304 | external |
| https://access.redhat.com/security/cve/CVE-2007-4465 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=289511 | external |
| https://www.cve.org/CVERecord?id=CVE-2007-4465 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2007-4465 | external |
| https://access.redhat.com/security/cve/CVE-2007-5000 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=419931 | external |
| https://www.cve.org/CVERecord?id=CVE-2007-5000 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2007-5000 | external |
| https://access.redhat.com/security/cve/CVE-2007-6388 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=427228 | external |
| https://www.cve.org/CVERecord?id=CVE-2007-6388 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2007-6388 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Network Proxy Server version 4.2.3 is now available. This update\nincludes fixes for a number of security issues in Red Hat Network Proxy\nServer components.\n\nThis update has been rated as having low security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Red Hat Network Proxy Server 4.2.3 release corrects several security\nvulnerabilities in several shipped components. In a typical operating\nenvironment, these components are not exposed to users of Proxy Server in a\nvulnerable manner. These security updates will reduce risk in unique Proxy\nServer environments.\n\nMultiple flaws were fixed in the Apache HTTPD server. These flaws could\nresult in a cross-site scripting or denial-of-service attack.\n(CVE-2007-6388, CVE-2007-5000, CVE-2007-4465, CVE-2007-3304, CVE-2006-5752,\nCVE-2006-3918, CVE-2005-3352)\n\nA denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)\n\nMultiple flaws in mod_ssl. (CVE-2004-0488, CVE-2004-0700, CVE-2004-0885)\n\nA denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)\n\nUsers of Red Hat Network Proxy Server 4.2 are advised to upgrade to 4.2.3,\nwhich resolves these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2008:0523",
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "449336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=449336"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0523.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Network Proxy Server security update",
"tracking": {
"current_release_date": "2026-01-13T22:36:33+00:00",
"generator": {
"date": "2026-01-13T22:36:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2008:0523",
"initial_release_date": "2008-06-30T15:29:00+00:00",
"revision_history": [
{
"date": "2008-06-30T15:29:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2008-06-30T11:32:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:36:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
"product": {
"name": "Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNPROXY4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_proxy:4.2::el3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
"product": {
"name": "Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNPROXY4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_proxy:4.2::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite Proxy"
},
{
"branches": [
{
"category": "product_version",
"name": "jabberd-0:2.0s10-3.37.rhn.i386",
"product": {
"name": "jabberd-0:2.0s10-3.37.rhn.i386",
"product_id": "jabberd-0:2.0s10-3.37.rhn.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jabberd@2.0s10-3.37.rhn?arch=i386"
}
}
},
{
"category": "product_version",
"name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"product": {
"name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"product_id": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "rhn-modperl-0:1.29-16.rhel3.i386",
"product": {
"name": "rhn-modperl-0:1.29-16.rhel3.i386",
"product_id": "rhn-modperl-0:1.29-16.rhel3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "jabberd-0:2.0s10-3.38.rhn.i386",
"product": {
"name": "jabberd-0:2.0s10-3.38.rhn.i386",
"product_id": "jabberd-0:2.0s10-3.38.rhn.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jabberd@2.0s10-3.38.rhn?arch=i386"
}
}
},
{
"category": "product_version",
"name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"product": {
"name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"product_id": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "rhn-modperl-0:1.29-16.rhel4.i386",
"product": {
"name": "rhn-modperl-0:1.29-16.rhel4.i386",
"product_id": "rhn-modperl-0:1.29-16.rhel4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel4?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jabberd-0:2.0s10-3.37.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386"
},
"product_reference": "jabberd-0:2.0s10-3.37.rhn.i386",
"relates_to_product_reference": "3AS-RHNPROXY4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386"
},
"product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"relates_to_product_reference": "3AS-RHNPROXY4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-modperl-0:1.29-16.rhel3.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386"
},
"product_reference": "rhn-modperl-0:1.29-16.rhel3.i386",
"relates_to_product_reference": "3AS-RHNPROXY4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jabberd-0:2.0s10-3.38.rhn.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386"
},
"product_reference": "jabberd-0:2.0s10-3.38.rhn.i386",
"relates_to_product_reference": "4AS-RHNPROXY4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386"
},
"product_reference": "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"relates_to_product_reference": "4AS-RHNPROXY4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-modperl-0:1.29-16.rhel4.i386 as a component of Red Hat Satellite Proxy v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
},
"product_reference": "rhn-modperl-0:1.29-16.rhel4.i386",
"relates_to_product_reference": "4AS-RHNPROXY4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2004-0488",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430867"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_ssl ssl_util_uuencode_binary CA issue",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0488"
},
{
"category": "external",
"summary": "RHBZ#430867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0488",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0488"
}
],
"release_date": "2004-05-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mod_ssl ssl_util_uuencode_binary CA issue"
},
{
"cve": "CVE-2004-0700",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430866"
}
],
"notes": [
{
"category": "description",
"text": "Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_proxy hook format string",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0700"
},
{
"category": "external",
"summary": "RHBZ#430866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430866"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0700",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0700"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0700"
}
],
"release_date": "2004-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mod_proxy hook format string"
},
{
"cve": "CVE-2004-0885",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430637"
}
],
"notes": [
{
"category": "description",
"text": "The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the \"SSLCipherSuite\" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_ssl SSLCipherSuite bypass",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0885"
},
{
"category": "external",
"summary": "RHBZ#430637",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430637"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0885",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0885"
}
],
"release_date": "2004-10-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mod_ssl SSLCipherSuite bypass"
},
{
"cve": "CVE-2005-3352",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2005-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430524"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd cross-site scripting flaw in mod_imap",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-3352"
},
{
"category": "external",
"summary": "RHBZ#430524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-3352",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3352"
}
],
"release_date": "2005-12-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd cross-site scripting flaw in mod_imap"
},
{
"cve": "CVE-2006-1329",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "429254"
}
],
"notes": [
{
"category": "description",
"text": "The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service (\"c2s segfault\") by sending a \"response stanza before an auth stanza\".",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jabberd SASL DoS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-1329"
},
{
"category": "external",
"summary": "RHBZ#429254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=429254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-1329",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1329"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1329"
}
],
"release_date": "2006-03-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jabberd SASL DoS"
},
{
"cve": "CVE-2006-3918",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2006-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "200732"
}
],
"notes": [
{
"category": "description",
"text": "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Expect header XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3918"
},
{
"category": "external",
"summary": "RHBZ#200732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=200732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3918",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3918"
}
],
"release_date": "2006-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Expect header XSS"
},
{
"cve": "CVE-2006-5752",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-06-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "245112"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform \"charset detection\" when the content-type is not specified.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd mod_status XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-5752"
},
{
"category": "external",
"summary": "RHBZ#245112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=245112"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5752"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5752"
}
],
"release_date": "2007-06-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd mod_status XSS"
},
{
"cve": "CVE-2007-1349",
"discovery_date": "2007-05-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "240423"
}
],
"notes": [
{
"category": "description",
"text": "PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_perl PerlRun denial of service",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-1349"
},
{
"category": "external",
"summary": "RHBZ#240423",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=240423"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-1349",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1349"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1349"
}
],
"release_date": "2007-03-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mod_perl PerlRun denial of service"
},
{
"cve": "CVE-2007-3304",
"discovery_date": "2007-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "245111"
}
],
"notes": [
{
"category": "description",
"text": "Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka \"SIGUSR1 killer.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd scoreboard lack of PID protection",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-3304"
},
{
"category": "external",
"summary": "RHBZ#245111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=245111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-3304",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3304"
}
],
"release_date": "2007-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd scoreboard lack of PID protection"
},
{
"cve": "CVE-2007-4465",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-09-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "289511"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_autoindex XSS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the \"AddDefaultCharset\" directive and are using directory indexes. The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4465"
},
{
"category": "external",
"summary": "RHBZ#289511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=289511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4465",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4465"
}
],
"release_date": "2007-09-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "mod_autoindex XSS"
},
{
"cve": "CVE-2007-5000",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-12-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "419931"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_imagemap XSS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-5000"
},
{
"category": "external",
"summary": "RHBZ#419931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=419931"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-5000",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5000"
}
],
"release_date": "2007-12-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: mod_imagemap XSS"
},
{
"cve": "CVE-2007-6388",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2008-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "427228"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache mod_status cross-site scripting",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6388"
},
{
"category": "external",
"summary": "RHBZ#427228",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=427228"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6388",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6388"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6388"
}
],
"release_date": "2007-12-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:29:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNPROXY4.2:jabberd-0:2.0s10-3.37.rhn.i386",
"3AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
"3AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel3.i386",
"4AS-RHNPROXY4.2:jabberd-0:2.0s10-3.38.rhn.i386",
"4AS-RHNPROXY4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
"4AS-RHNPROXY4.2:rhn-modperl-0:1.29-16.rhel4.i386"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0523"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache mod_status cross-site scripting"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…