Several security issues have been found in various packages in Stronghold 4.0: A flaw in the handling of regular expressions from configuration files in the Apache HTTP Server could lead to a buffer overflow. To exploit this issue, an attacker would need to have the ability to write to Apache configuration files such as .htaccess or httpd.conf. (CVE-2003-0542) mod_digest did not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a malicious user who is able to sniff network traffic to conduct a replay attack against a website using Digest protection. Note that mod_digest implements an older version of the MD5 Digest Authentication specification which is known not to work with modern browsers. This issue does not affect mod_auth_digest. (CVE-2003-0987) A buffer overflow in the Apache proxy module, mod_proxy, which could be triggered by receiving an invalid Content-Length header. In order to exploit this issue, an attacker would need an Apache installation that was configured as a proxy to connect to a malicious site. This would cause the Apache child processing the request to crash. (CVE-2004-0492) A buffer overflow in the get_tag function in mod_include allowed local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error. (CVE-2004-0940)
CVE-2004-0492 does not affect mod_proxy in 1.3.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2005-816.html