Skip to content
OpenAdvisories
Unscored RHSA-2009:1461 8 CVEs

Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 53

ReleasePackageFixed in
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd 0:2.2.13-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-debuginfo 0:2.2.13-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-devel 0:2.2.13-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 httpd-manual 0:2.2.13-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mod_ssl 1:2.2.13-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-bench 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-cluster 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-debuginfo 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-devel 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-libs 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-server 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 mysql-test 0:5.0.84-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-MySQL 0:4.012-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBD-MySQL-debuginfo 0:4.012-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBI 0:1.609-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 perl-DBI-debuginfo 0:1.609-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-bcmath 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-cli 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-common 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-dba 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-debuginfo 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-devel 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-gd 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-imap 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-ldap 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-mbstring 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-mysql 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-ncurses 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-odbc 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pdo 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pear 1:1.8.1-2.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pgsql 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-snmp 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-soap 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-xml 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-xmlrpc 0:5.2.10-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-contrib 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-debuginfo 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-devel 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-docs 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-jdbc 0:8.2.510-1jpp.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-jdbc-debuginfo 0:8.2.510-1jpp.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-libs 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-plperl 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-plpython 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-pltcl 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-python 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-server 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-tcl 0:8.2.14-1.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 postgresql-test 0:8.2.14-1.el5s2

Vulnerabilities 8

  • Unscored —
    CVE-2008-4456 Public exploit

    Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions …

  • Unscored —
    CVE-2009-2446 Public exploit EPSS 11%

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.…

  • Unscored —
    CVE-2009-2687

    The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-3094

    The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.…

    apache2 Debian
  • Unscored —
    CVE-2009-3095 EPSS 14%

    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and s…

    apache2 Debian
  • Unscored —
    CVE-2009-3229

    The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authent…

  • Unscored —
    CVE-2009-3230

    The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 b…

  • Unscored —
    CVE-2009-3231

    The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with ano…

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=506896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522085
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522092
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522209
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-4456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4456
  • report
    https://access.redhat.com/security/cve/CVE-2009-2446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2446
  • report
    https://access.redhat.com/security/cve/CVE-2009-2687
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2687
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2687
  • report
    https://access.redhat.com/security/cve/CVE-2009-3094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3094
  • report
    https://access.redhat.com/security/cve/CVE-2009-3095
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3095
  • report
    https://access.redhat.com/security/cve/CVE-2009-3229
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3229
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3229
  • report
    https://access.redhat.com/security/cve/CVE-2009-3230
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3230
  • report
    https://access.redhat.com/security/cve/CVE-2009-3231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3231
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3231