Test ID:	1.3.6.1.4.1.25623.1.1.13.2024.200.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2024-200-01)
Summary:	The remote host is missing an update for the 'httpd' package(s) announced via the SSA:2024-200-01 advisory.
Description:	Summary: The remote host is missing an update for the 'httpd' package(s) announced via the SSA:2024-200-01 advisory. Vulnerability Insight: New httpd packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.62-i586-1_slack15.0.txz: Upgraded. This release contains security fixes and improvements. The first CVE is for Windows, but the second one is an additional fix for the source code disclosure regression when using AddType. Users are recommended to upgrade to version 2.4.62 which fixes this issue. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'httpd' package(s) on Slackware 15.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-40725 Common Vulnerability Exposure (CVE) ID: CVE-2024-40898
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.