Secunia Logo
Netsikker nu! 2008
 
SUSE update for apache2
Secunia Advisory: SA21848
Release Date: 2006-09-11
Popularity: 6,440 views

Critical:
Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status: Vendor Patch

OS:SUSE Linux 10
SUSE Linux 9.2
SUSE Linux 9.3
SUSE Linux Enterprise Server 9

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-3918


Description:
SUSE has issued an update for apache2. This fixes a vulnerability, which can be exploited by malicious people to conduct cross-site scripting attacks.

For more information:
SA21172

Note: These packages also fix a problem which was introduced by a previous patch for CVE-2005-3357.

Solution:
Apply updated packages.

x86 Platform:

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/apache2-2.0.54-10.8.i586.rpm
4e5f7482e476e85e92df04868fda661c
ftp://ftp.suse.com/pub/suse/i386/upda.../apache2-prefork-2.0.54-10.8.i586.rpm
56fc5c08895d0a9a3c2cc6015b3dd34b
ftp://ftp.suse.com/pub/suse/i386/upda...6/apache2-worker-2.0.54-10.8.i586.rpm
8b1c3a66cbad2f102b1569f3e0333501

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/apache2-2.0.53-9.15.i586.rpm
a2aa08e4ddd70859ec542aed22ccdee9
ftp://ftp.suse.com/pub/suse/i386/upda.../apache2-prefork-2.0.53-9.15.i586.rpm
bf0ceb6357957c5e0565857dbf544ea3
ftp://ftp.suse.com/pub/suse/i386/upda...6/apache2-worker-2.0.53-9.15.i586.rpm
eddf464f0073f6d1b3576fa5ef0b5c8b

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/apache2-2.0.50-7.17.i586.rpm
3d7ae24eeb12d37484db873829cad192
ftp://ftp.suse.com/pub/suse/i386/upda.../apache2-prefork-2.0.50-7.17.i586.rpm
7ac171bd3c9fe75cb96d18038b63c1f6
ftp://ftp.suse.com/pub/suse/i386/upda...6/apache2-worker-2.0.50-7.17.i586.rpm
9e6cecbb28ae31c0693e3cb849a75f8f

Power PC Platform:

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/apache2-2.0.54-10.8.ppc.rpm
c0690dee4b47c8ece321996832397915
ftp://ftp.suse.com/pub/suse/i386/upda...c/apache2-prefork-2.0.54-10.8.ppc.rpm
4cb7734bcf6c5c1de524ac1b3bc183b2
ftp://ftp.suse.com/pub/suse/i386/upda...pc/apache2-worker-2.0.54-10.8.ppc.rpm
c1e262a0f1dd27c7d4da0919070f53a1

x86-64 Platform:

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda...x86_64/apache2-2.0.54-10.8.x86_64.rpm
5a11e9b78e0f946403c47797fb4e49b9
ftp://ftp.suse.com/pub/suse/i386/upda...pache2-prefork-2.0.54-10.8.x86_64.rpm
b05190443513cea99aafd1a15baf3ddc
ftp://ftp.suse.com/pub/suse/i386/upda...apache2-worker-2.0.54-10.8.x86_64.rpm
9248815b04fc1a26950d33c5bcc6b85f

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/upda...x86_64/apache2-2.0.53-9.15.x86_64.rpm
6ce32141596325584f13a18f0271269c
ftp://ftp.suse.com/pub/suse/i386/upda...pache2-prefork-2.0.53-9.15.x86_64.rpm
dfddc46d4b6feab89f35a579d5471533
ftp://ftp.suse.com/pub/suse/i386/upda...apache2-worker-2.0.53-9.15.x86_64.rpm
de9fb2bd70949d79cc5f020f72beca37

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/upda...x86_64/apache2-2.0.50-7.17.x86_64.rpm
632e9b785b32694a141d0b89d27ac489
ftp://ftp.suse.com/pub/suse/i386/upda...pache2-prefork-2.0.50-7.17.x86_64.rpm
b63783a1c93a875064f56f55151acf81
ftp://ftp.suse.com/pub/suse/i386/upda...apache2-worker-2.0.50-7.17.x86_64.rpm
43ffab89ba259f707edc199ed54eee57

Sources:

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/apache2-2.0.54-10.8.src.rpm
ae34902816649e317fd03afd1a185565

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/apache2-2.0.53-9.15.src.rpm
a4da14a77b4c58a07cd0fcf9e324b3ed

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/apache2-2.0.50-7.17.src.rpm
ab9adcf8c71117ed3cb9f1ba75b2138a

Original Advisory:
http://lists.suse.com/archive/suse-security-announce/2006-Sep/0004.html

Other References:
SA21172:
http://secunia.com/advisories/21172/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

7th Oct, 2008
New advisories: 19
New vulnerabilities: 68
Updated advisories: 62

Moderately // 327 views
Debian update for php5
Moderately // 254 views
Atarone CMS Multiple Vulnerabilities
Moderately // 284 views
Debian update for squid
Less // 284 views
SUSE update for mercurial
Moderately // 331 views
SUSE update for openssh
Less // 265 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB "url" bbcode Script Insertion Vulnerability // 90 views
2. phpBB BBcode "url" Script Insertion Vulnerability // 66 views
3. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 34 views
4. SUSE update for openssh // 29 views
5. Debian update for php5 // 27 views
6. MetaGauge Directory Traversal Vulnerability // 27 views
7. SUSE update for dovecot and graphicsmagic // 26 views
8. D-Bus "_dbus_validate_signature_with_reason()" Denial of Service // 26 views
9. H-Sphere webshell4 Cross-Site Scripting and Request Forgery // 26 views
10. Atarone CMS Multiple Vulnerabilities // 25 views