Skip to content
OpenAdvisories
Unscored RHSA-2013:0130 3 CVEs

Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client httpd 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client httpd-debuginfo 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client mod_ssl 1:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-debuginfo 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-devel 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-manual 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::server httpd 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::server httpd-debuginfo 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::server httpd-devel 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::server httpd-manual 0:2.2.3-74.el5
Red Hat · RHEL 5 enterprise_linux:5::server mod_ssl 1:2.2.3-74.el5

Vulnerabilities 3

  • Unscored —
    CVE-2008-0455 Public exploit EPSS 65%

    Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in t…

    apache2 Debian
  • Unscored —
    CVE-2008-0456 EPSS 19%

    CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x ser…

    apache2 Debian
  • Unscored —
    CVE-2012-2687 EPSS 23%

    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_n…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=727342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=752618
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=767890
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=773473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=783242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=845532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=850794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=879292
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0130.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0455
  • report
    https://access.redhat.com/security/cve/CVE-2008-0456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0456
  • report
    https://access.redhat.com/security/cve/CVE-2012-2687
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2687
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2687