Description

Red Hat has issued updates for httpd. These fix vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and by malicious people to conduct cross-site scripting attacks.

1) An error in the mod_status module can be exploited by malicious people to conduct cross-site scripting attacks.

For more information:
SA25827

2) An error in the Multi-Processing Module (MPM) can be exploited by malicious, local users to cause a DoS.

For more information:
SA25827

3) An error in the mod_cache module in the handling of Cache-Control headers can be exploited to crash the child process via specially crafted requests. This could lead to a DoS if using a threaded Multi-Processing Module.

Solution
Updated packages are available from Red Hat Network.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
https://rhn.redhat.com/errata/RHSA-2007-0556.html
https://rhn.redhat.com/errata/RHSA-2007-0534.html
https://rhn.redhat.com/errata/RHSA-2007-0533.html
https://rhn.redhat.com/errata/RHSA-2007-0662.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area