Skip to content
OpenAdvisories
Unscored RHSA-2008:0966 3 CVEs

Red Hat Security Advisory: Red Hat Application Stack v2.2 security and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 37

ReleasePackageFixed in
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd 0:2.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-debuginfo 0:2.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-devel 0:2.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-manual 0:2.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mod_ssl 1:2.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-bench 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-cluster 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-connector-odbc 0:3.51.26r1127-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-connector-odbc-debuginfo 0:3.51.26r1127-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-debuginfo 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-devel 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-libs 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-server 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-test 0:5.0.60sp1-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-MySQL 0:4.008-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-MySQL-debuginfo 0:4.008-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-Pg 0:1.49-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-Pg-debuginfo 0:1.49-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBI 0:1.607-3.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBI-debuginfo 0:1.607-3.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pear 1:1.7.2-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-contrib 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-debuginfo 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-devel 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-docs 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-libs 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-plperl 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-plpython 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-pltcl 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-python 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-server 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-tcl 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-test 0:8.2.11-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresqlclient81 0:8.1.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresqlclient81-debuginfo 0:8.1.14-1.el5s2

Vulnerabilities 3

  • Unscored —
    CVE-2007-6420

    Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.…

    apache2 Debian
  • Unscored —
    CVE-2008-2364 EPSS 13%

    The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.6…

    apache2 Debian
  • Unscored —
    CVE-2008-2939 EPSS 39%

    Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and m…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=451615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458250
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=471009
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0966.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-6420
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6420
  • report
    https://access.redhat.com/security/cve/CVE-2008-2364
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2364
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2364
  • report
    https://access.redhat.com/security/cve/CVE-2008-2939
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2939
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2939