PT-2017-6491 · Apache+1 · Httpd+1

Felix Eckhofer · Publicado 2017-08-28 · Atualizado 2017-09-07 · CVE-2015-1445

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions fli4l versions prior to 3.10.1 fli4l versions 4.0 before 2015-01-30

Description The issue concerns HTTP header injection in the httpd package.

Recommendations For fli4l versions prior to 3.10.1, update to version 3.10.1 or later. For fli4l versions 4.0 before 2015-01-30, update to a version released after 2015-01-30.

Correção

Enumeração de Fraquezas

CWE-113

Identificadores relacionados

CVE-2015-1445

Produtos afetados

Fli4L

Httpd

Referências · 4

• http://seclists.org/oss-sec/2015/q1/376 · Nota
• http://fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/02/01/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1445 · Nota de Segurança