Description

SGI has issued updates to Apache, this updates deals with multiple older issues.

Shared memory scoreboard issue which allow for local Denial of Service attacks.

Cross Site Scripting hole when canonical name is off and wildcard DNS is used.

Remotely exploitable vulnerability in ab.

Race condition in htpasswd and htdigest, which allows local users to snoop on passwords.

Solution
SGI has released a fixed, non-beta version.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
Old advisory:
ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I

New advisory:
ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I

Deep Links
Links available to Secunia VIM customers