Ubuntu 4.10 / 5.04 : apache vulnerability (USN-160-2)

Medium Nessus Plugin ID 20566

Synopsis

The remote Ubuntu host is missing one or more security-related patches.

Description

USN-160-1 fixed two vulnerabilities in the Apache 2 server. The old Apache 1 server was also vulnerable to one of the vulnerabilities (CAN-2005-2088). Please note that Apache 1 is not officially supported in Ubuntu (it is in the 'universe' component of the archive).

For reference, this is the relevant part of the original advisory :

Watchfire discovered that Apache insufficiently verified the 'Transfer-Encoding' and 'Content-Length' headers when acting as an HTTP proxy. By sending a specially crafted HTTP request, a remote attacker who is authorized to use the proxy could exploit this to bypass web application firewalls, poison the HTTP proxy cache, and conduct cross-site scripting attacks against other proxy users.
(CAN-2005-2088).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 20566

File Name: ubuntu_USN-160-2.nasl

Version: 1.16

Type: local

Agent: unix

Published: 2006/01/15

Updated: 2018/08/15

Dependencies: 12634

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:canonical:ubuntu_linux:apache, p-cpe:/a:canonical:ubuntu_linux:apache-common, p-cpe:/a:canonical:ubuntu_linux:apache-dbg, p-cpe:/a:canonical:ubuntu_linux:apache-dev, p-cpe:/a:canonical:ubuntu_linux:apache-doc, p-cpe:/a:canonical:ubuntu_linux:apache-perl, p-cpe:/a:canonical:ubuntu_linux:apache-ssl, p-cpe:/a:canonical:ubuntu_linux:apache-utils, p-cpe:/a:canonical:ubuntu_linux:libapache-mod-perl, cpe:/o:canonical:ubuntu_linux:4.10, cpe:/o:canonical:ubuntu_linux:5.04

Patch Publication Date: 2005/09/07

Vulnerability Publication Date: 2005/06/06

Reference Information

CVE: CVE-2005-2088

USN: 160-2