PT-2017-6491 · Apache+1 · Httpd+1

Felix Eckhofer · Published 2017-08-28 · Updated 2017-09-07 · CVE-2015-1445

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions fli4l versions prior to 3.10.1 fli4l versions 4.0 before 2015-01-30

Description The issue concerns HTTP header injection in the httpd package.

Recommendations For fli4l versions prior to 3.10.1, update to version 3.10.1 or later. For fli4l versions 4.0 before 2015-01-30, update to a version released after 2015-01-30.

Fix

Weakness Enumeration

CWE-113

Related Identifiers

CVE-2015-1445

Affected Products

Fli4L

Httpd

References · 4

• http://fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1445 · Security Note
• http://seclists.org/oss-sec/2015/q1/376 · Note
• http://openwall.com/lists/oss-security/2015/02/01/5 · Note