SuSE 10 Security Update : Apache2 (ZYPP Patch Number 1906)
High Nessus Plugin ID 29372
SynopsisThe remote SuSE 10 host is missing a security-related patch.
DescriptionThis update fixes security problems in the Apache2 webserver :
mod_rewrite: Fixed an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer being written out of bounds. (CVE-2006-3747)
For SUSE Linux Enterprise Server 10 additionally an old security problem was fixed: mod_imap: Fixes a cross-site scripting bug in the imagemap module. (CVE-2005-3352)
SolutionApply ZYPP patch number 1906.