Test ID:	1.3.6.1.4.1.25623.1.0.802758
Category:	Web application abuses
Title:	HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)
Summary:	HP/HPE System Management Homepage (SMH) is prone to multiple; vulnerabilities.
Description:	Summary: HP/HPE System Management Homepage (SMH) is prone to multiple vulnerabilities. Affected Software/OS: HP/HPE SMH version 6.2.2.7 and prior. Solution: Update to version 7.0 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0037 1021783 http://www.securitytracker.com/id?1021783 20090312 rPSA-2009-0042-1 curl http://www.securityfocus.com/archive/1/501757/100/0/threaded 20090711 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl http://www.securityfocus.com/archive/1/504849/100/0/threaded 33962 http://www.securityfocus.com/bid/33962 34138 http://secunia.com/advisories/34138 34202 http://secunia.com/advisories/34202 34237 http://secunia.com/advisories/34237 34251 http://secunia.com/advisories/34251 34255 http://secunia.com/advisories/34255 34259 http://secunia.com/advisories/34259 34399 http://secunia.com/advisories/34399 35766 http://secunia.com/advisories/35766 ADV-2009-0581 http://www.vupen.com/english/advisories/2009/0581 ADV-2009-1865 http://www.vupen.com/english/advisories/2009/1865 APPLE-SA-2010-03-29-1 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html DSA-1738 http://www.debian.org/security/2009/dsa-1738 GLSA-200903-21 http://security.gentoo.org/glsa/glsa-200903-21.xml RHSA-2009:0341 http://www.redhat.com/support/errata/RHSA-2009-0341.html SSA:2009-069-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602 SUSE-SR:2009:006 http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html USN-726-1 http://www.ubuntu.com/usn/USN-726-1 [Security-announce] 20090710 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl http://lists.vmware.com/pipermail/security-announce/2009/000060.html curl-location-security-bypass(49030) https://exchange.xforce.ibmcloud.com/vulnerabilities/49030 http://curl.haxx.se/docs/adv_20090303.html http://curl.haxx.se/lxr/source/CHANGES http://support.apple.com/kb/HT4077 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042 http://www.vmware.com/security/advisories/VMSA-2009-0009.html http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/ http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf oval:org.mitre.oval:def:11054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054 oval:org.mitre.oval:def:6074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074 Common Vulnerability Exposure (CVE) ID: CVE-2010-0734 20101027 rPSA-2010-0072-1 curl http://www.securityfocus.com/archive/1/514490/100/0/threaded 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 38843 http://secunia.com/advisories/38843 38981 http://secunia.com/advisories/38981 39087 http://secunia.com/advisories/39087 39734 http://secunia.com/advisories/39734 40220 http://secunia.com/advisories/40220 45047 http://secunia.com/advisories/45047 48256 http://secunia.com/advisories/48256 ADV-2010-0571 http://www.vupen.com/english/advisories/2010/0571 ADV-2010-0602 http://www.vupen.com/english/advisories/2010/0602 ADV-2010-0660 http://www.vupen.com/english/advisories/2010/0660 ADV-2010-0725 http://www.vupen.com/english/advisories/2010/0725 ADV-2010-1481 http://www.vupen.com/english/advisories/2010/1481 APPLE-SA-2010-06-15-1 http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html DSA-2023 http://www.debian.org/security/2010/dsa-2023 FEDORA-2010-2720 http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037143.html FEDORA-2010-2762 http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html GLSA-201203-02 http://security.gentoo.org/glsa/glsa-201203-02.xml MDVSA-2010:062 http://www.mandriva.com/security/advisories?name=MDVSA-2010:062 RHSA-2010:0329 http://www.redhat.com/support/errata/RHSA-2010-0329.html USN-1158-1 http://www.ubuntu.com/usn/USN-1158-1 [oss-security] 20100209 CVE Request -- cURL/libCURL 7.20.0 http://www.openwall.com/lists/oss-security/2010/02/09/5 [oss-security] 20100309 Re: CVE Request -- cURL/libCURL 7.20.0 http://www.openwall.com/lists/oss-security/2010/03/09/1 [oss-security] 20100316 Re: CVE Request -- cURL/libCURL 7.20.0 http://www.openwall.com/lists/oss-security/2010/03/16/11 http://curl.haxx.se/docs/adv_20100209.html http://curl.haxx.se/docs/security.html#20100209 http://curl.haxx.se/libcurl-contentencoding.patch http://support.apple.com/kb/HT4188 http://support.avaya.com/css/P8/documents/100081819 http://wiki.rpath.com/Advisories:rPSA-2010-0072 http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=563220 oval:org.mitre.oval:def:10760 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10760 oval:org.mitre.oval:def:6756 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6756 Common Vulnerability Exposure (CVE) ID: CVE-2010-1452 42367 http://secunia.com/advisories/42367 ADV-2010-2218 http://www.vupen.com/english/advisories/2010/2218 ADV-2010-3064 http://www.vupen.com/english/advisories/2010/3064 ADV-2011-0291 http://www.vupen.com/english/advisories/2011/0291 APPLE-SA-2011-03-21-1 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html HPSBMU02753 http://marc.info/?l=bugtraq&m=133355494609819&w=2 HPSBUX02612 http://marc.info/?l=bugtraq&m=129190899612998&w=2 RHSA-2010:0659 http://www.redhat.com/support/errata/RHSA-2010-0659.html RHSA-2011:0896 http://www.redhat.com/support/errata/RHSA-2011-0896.html RHSA-2011:0897 http://www.redhat.com/support/errata/RHSA-2011-0897.html SSA:2010-240-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.467395 SSRT100345 SSRT100782 SUSE-SU-2011:1000 http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html SUSE-SU-2011:1216 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html USN-1021-1 http://ubuntu.com/usn/usn-1021-1 [apache-announce] 20100725 [ANNOUNCEMENT] Apache HTTP Server 2.2.16 Released http://marc.info/?l=apache-announce&m=128009718610929&w=2 [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/ https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/ https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210422 svn commit: r1074079 [2/3] - in /websites/staging/httpd/trunk/content: ./ apreq/ contribute/ contributors/ dev/ docs-project/ docs/ info/ mod_fcgid/ mod_ftp/ mod_mbox/ mod_smtpd/ modules/ security/ test/ test/flood/ https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav http://httpd.apache.org/security/vulnerabilities_22.html http://support.apple.com/kb/HT4581 https://issues.apache.org/bugzilla/show_bug.cgi?id=49246 oval:org.mitre.oval:def:11683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683 oval:org.mitre.oval:def:12341 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341 Common Vulnerability Exposure (CVE) ID: CVE-2010-1623 41701 http://secunia.com/advisories/41701 42015 http://secunia.com/advisories/42015 42361 http://secunia.com/advisories/42361 42403 http://secunia.com/advisories/42403 42537 http://secunia.com/advisories/42537 43211 http://secunia.com/advisories/43211 43285 http://secunia.com/advisories/43285 43673 http://www.securityfocus.com/bid/43673 ADV-2010-2556 http://www.vupen.com/english/advisories/2010/2556 ADV-2010-2557 http://www.vupen.com/english/advisories/2010/2557 ADV-2010-2806 http://www.vupen.com/english/advisories/2010/2806 ADV-2010-3065 http://www.vupen.com/english/advisories/2010/3065 ADV-2010-3074 http://www.vupen.com/english/advisories/2010/3074 ADV-2011-0358 http://www.vupen.com/english/advisories/2011/0358 FEDORA-2010-15916 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.html FEDORA-2010-15953 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049885.html HPSBUX02645 http://marc.info/?l=bugtraq&m=130168502603566&w=2 MDVSA-2010:192 http://www.mandriva.com/security/advisories?name=MDVSA-2010:192 PM23263 http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601 PM31601 RHSA-2010:0950 http://www.redhat.com/support/errata/RHSA-2010-0950.html SSA:2011-041-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.627828 SUSE-SU-2011:1229 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html USN-1022-1 http://www.ubuntu.com/usn/USN-1022-1 [httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E [httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E http://blogs.sun.com/security/entry/cve_2010_1623_memory_leak http://security-tracker.debian.org/tracker/CVE-2010-1623 http://svn.apache.org/viewvc?view=revision&revision=1003492 http://svn.apache.org/viewvc?view=revision&revision=1003493 http://svn.apache.org/viewvc?view=revision&revision=1003494 http://svn.apache.org/viewvc?view=revision&revision=1003495 http://svn.apache.org/viewvc?view=revision&revision=1003626 http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 oval:org.mitre.oval:def:12800 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12800 Common Vulnerability Exposure (CVE) ID: CVE-2010-2068 1024096 http://securitytracker.com/id?1024096 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068 http://www.securityfocus.com/archive/1/511809/100/0/threaded 40206 http://secunia.com/advisories/40206 40824 http://secunia.com/advisories/40824 40827 http://www.securityfocus.com/bid/40827 41480 http://secunia.com/advisories/41480 41490 http://secunia.com/advisories/41490 41722 http://secunia.com/advisories/41722 ADV-2010-1436 http://www.vupen.com/english/advisories/2010/1436 HPSBMA02568 http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 MDVSA-2013:150 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 PM16366 http://www.ibm.com/support/docview.wss?uid=swg1PM16366 SI4053 http://www-01.ibm.com/support/docview.wss?uid=nas352ca0ac9460f9b8886257777005dd0e4 SSRT100219 [httpd-announce] 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068 http://mail-archives.apache.org/mod_mbox/httpd-announce/201006.mbox/%3C4C12933D.4060400%40apache.org%3E [httpd-cvs] 20210330 svn commit: r1888222 - in /httpd/site/trunk/content/security/json: CVE-2010-2068.json CVE-2010-2791.json CVE-2011-0419.json CVE-2011-3368.json https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E apache-modproxyhttp-timeout-info-disc(59413) https://exchange.xforce.ibmcloud.com/vulnerabilities/59413 http://www.apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch http://www.apache.org/dist/httpd/patches/apply_to_2.3.5/CVE-2010-2068-r953418.patch http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html oval:org.mitre.oval:def:11491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11491 oval:org.mitre.oval:def:6931 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6931 Common Vulnerability Exposure (CVE) ID: CVE-2010-2791 42102 http://www.securityfocus.com/bid/42102 [httpd-cvs] 20210330 svn commit: r1073149 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E [oss-security] 20100730 CVE-2010-2791: mod_proxy information leak affecting 2.2.9 only http://www.openwall.com/lists/oss-security/2010/07/30/1 apache-modproxy-info-disclsoure(60883) https://exchange.xforce.ibmcloud.com/vulnerabilities/60883 Common Vulnerability Exposure (CVE) ID: CVE-2010-3436 42729 http://secunia.com/advisories/42729 42812 http://secunia.com/advisories/42812 44723 http://www.securityfocus.com/bid/44723 ADV-2010-3313 http://www.vupen.com/english/advisories/2010/3313 ADV-2011-0077 http://www.vupen.com/english/advisories/2011/0077 APPLE-SA-2011-10-12-3 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html MDVSA-2010:218 http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 SSA:2010-357-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 USN-1042-1 http://www.ubuntu.com/usn/USN-1042-1 http://security-tracker.debian.org/tracker/CVE-2010-3436 http://support.apple.com/kb/HT5002 http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824 http://svn.php.net/viewvc?view=revision&revision=303824 http://www.php.net/ChangeLog-5.php http://www.php.net/archive/2010.php#id2010-12-10-1 http://www.php.net/releases/5_2_15.php http://www.php.net/releases/5_3_4.php Common Vulnerability Exposure (CVE) ID: CVE-2010-4409 BugTraq ID: 45119 http://www.securityfocus.com/bid/45119 Bugtraq: 20101210 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow (Google Search) http://www.securityfocus.com/archive/1/515142/100/0/threaded CERT/CC vulnerability note: VU#479900 http://www.kb.cert.org/vuls/id/479900 http://www.exploit-db.com/exploits/15722 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:254 http://www.mandriva.com/security/advisories?name=MDVSA-2010:255 http://secunia.com/advisories/47674 SuSE Security Announcement: openSUSE-SU-2012:0100 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html http://www.vupen.com/english/advisories/2011/0020 http://www.vupen.com/english/advisories/2011/0021 Common Vulnerability Exposure (CVE) ID: CVE-2010-4645 42843 http://secunia.com/advisories/42843 43051 http://secunia.com/advisories/43051 43189 http://secunia.com/advisories/43189 45668 http://www.securityfocus.com/bid/45668 ADV-2011-0060 http://www.vupen.com/english/advisories/2011/0060 ADV-2011-0066 http://www.vupen.com/english/advisories/2011/0066 ADV-2011-0198 http://www.vupen.com/english/advisories/2011/0198 FEDORA-2011-0321 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053355.html FEDORA-2011-0329 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053333.html HPSBMU02752 http://marc.info/?l=bugtraq&m=133226187115472&w=2 HPSBOV02763 http://marc.info/?l=bugtraq&m=133469208622507&w=2 RHSA-2011:0195 http://www.redhat.com/support/errata/RHSA-2011-0195.html RHSA-2011:0196 http://www.redhat.com/support/errata/RHSA-2011-0196.html SSA:2011-010-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.484686 SSRT100802 SSRT100826 [oss-security] 20110105 Re: possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/05/8 [oss-security] 20110105 possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/05/2 [oss-security] 20110106 Re: possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/06/5 http://bugs.php.net/53632 http://hal.archives-ouvertes.fr/docs/00/28/14/29/PDF/floating-point-article.pdf http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/Zend/zend_strtod.c?r1=266327&r2=307095&pathrev=307095 http://www.exploringbinary.com/php-hangs-on-numeric-value-2-2250738585072011e-308/ php-zendstrtod-dos(64470) https://exchange.xforce.ibmcloud.com/vulnerabilities/64470 http://www.openwall.com/lists/oss-security/2023/05/14/3 Common Vulnerability Exposure (CVE) ID: CVE-2011-0014 1025050 http://www.securitytracker.com/id?1025050 43227 http://secunia.com/advisories/43227 43286 http://secunia.com/advisories/43286 43301 http://secunia.com/advisories/43301 43339 http://secunia.com/advisories/43339 44269 http://secunia.com/advisories/44269 46264 http://www.securityfocus.com/bid/46264 57353 http://secunia.com/advisories/57353 70847 http://osvdb.org/70847 ADV-2011-0361 http://www.vupen.com/english/advisories/2011/0361 ADV-2011-0387 http://www.vupen.com/english/advisories/2011/0387 ADV-2011-0389 http://www.vupen.com/english/advisories/2011/0389 ADV-2011-0395 http://www.vupen.com/english/advisories/2011/0395 ADV-2011-0399 http://www.vupen.com/english/advisories/2011/0399 ADV-2011-0603 http://www.vupen.com/english/advisories/2011/0603 APPLE-SA-2011-06-23-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html DSA-2162 http://www.debian.org/security/2011/dsa-2162 FEDORA-2011-1273 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html HPSBMA02658 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 HPSBOV02670 http://marc.info/?l=bugtraq&m=130497251507577&w=2 HPSBUX02689 http://marc.info/?l=bugtraq&m=131042179515633&w=2 MDVSA-2011:028 http://www.mandriva.com/security/advisories?name=MDVSA-2011:028 NetBSD-SA2011-002 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc RHSA-2011:0677 http://www.redhat.com/support/errata/RHSA-2011-0677.html SSA:2011-041-04 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823 SSRT100413 SSRT100475 SSRT100494 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html USN-1064-1 http://www.ubuntu.com/usn/USN-1064-1 http://support.apple.com/kb/HT4723 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.openssl.org/news/secadv_20110208.txt https://support.f5.com/csp/article/K10534046 oval:org.mitre.oval:def:18985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985 Common Vulnerability Exposure (CVE) ID: CVE-2011-0195 http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html http://www.securitytracker.com/id?1025365 Common Vulnerability Exposure (CVE) ID: CVE-2011-0419 Debian Security Information: DSA-2237 (Google Search) http://www.debian.org/security/2011/dsa-2237 HPdes Security Advisory: HPSBMU02704 http://marc.info/?l=bugtraq&m=132033751509019&w=2 HPdes Security Advisory: HPSBOV02822 http://marc.info/?l=bugtraq&m=134987041210674&w=2 HPdes Security Advisory: HPSBUX02702 http://marc.info/?l=bugtraq&m=131551295528105&w=2 HPdes Security Advisory: HPSBUX02707 http://marc.info/?l=bugtraq&m=131731002122529&w=2 HPdes Security Advisory: SSRT100606 HPdes Security Advisory: SSRT100619 HPdes Security Advisory: SSRT100626 HPdes Security Advisory: SSRT100966 http://www.mandriva.com/security/advisories?name=MDVSA-2011:084 http://cxib.net/stuff/apache.fnmatch.phps http://cxib.net/stuff/apr_fnmatch.txts http://www.mail-archive.com/dev@apr.apache.org/msg23961.html http://www.mail-archive.com/dev@apr.apache.org/msg23960.html http://www.mail-archive.com/dev@apr.apache.org/msg23976.html https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804 http://www.redhat.com/support/errata/RHSA-2011-0507.html http://securitytracker.com/id?1025527 http://secunia.com/advisories/44490 http://secunia.com/advisories/44564 http://secunia.com/advisories/44574 http://secunia.com/advisories/48308 http://securityreason.com/securityalert/8246 http://securityreason.com/achievement_securityalert/98 SuSE Security Announcement: SUSE-SU-2011:1229 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-1148 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html BugTraq ID: 46843 http://www.securityfocus.com/bid/46843 BugTraq ID: 49241 http://www.securityfocus.com/bid/49241 HPdes Security Advisory: HPSBOV02763 HPdes Security Advisory: SSRT100826 http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 http://openwall.com/lists/oss-security/2011/03/13/2 http://openwall.com/lists/oss-security/2011/03/13/3 http://openwall.com/lists/oss-security/2011/03/13/9 http://www.redhat.com/support/errata/RHSA-2011-1423.html XForce ISS Database: php-substrreplace-code-exec(66080) https://exchange.xforce.ibmcloud.com/vulnerabilities/66080 Common Vulnerability Exposure (CVE) ID: CVE-2011-1153 43744 http://secunia.com/advisories/43744 46854 http://www.securityfocus.com/bid/46854 ADV-2011-0744 http://www.vupen.com/english/advisories/2011/0744 ADV-2011-0764 http://www.vupen.com/english/advisories/2011/0764 ADV-2011-0890 http://www.vupen.com/english/advisories/2011/0890 DSA-2266 http://www.debian.org/security/2011/dsa-2266 FEDORA-2011-3614 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html FEDORA-2011-3636 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html FEDORA-2011-3666 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 MDVSA-2011:053 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 [oss-security] 20110314 CVE request: format-string vulnerability in PHP Phar extension http://openwall.com/lists/oss-security/2011/03/14/13 [oss-security] 20110314 Re: CVE request: format-string vulnerability in PHP Phar extension http://openwall.com/lists/oss-security/2011/03/14/14 http://openwall.com/lists/oss-security/2011/03/14/24 http://bugs.php.net/bug.php?id=54247 http://svn.php.net/viewvc?view=revision&revision=309221 http://www.php.net/archive/2011.php http://www.php.net/releases/5_3_6.php https://bugzilla.redhat.com/show_bug.cgi?id=688378 php-pharobject-format-string(66079) https://exchange.xforce.ibmcloud.com/vulnerabilities/66079 Common Vulnerability Exposure (CVE) ID: CVE-2011-1464 Common Vulnerability Exposure (CVE) ID: CVE-2011-1467 BugTraq ID: 46968 http://www.securityfocus.com/bid/46968 Common Vulnerability Exposure (CVE) ID: CVE-2011-1468 BugTraq ID: 46977 http://www.securityfocus.com/bid/46977 Common Vulnerability Exposure (CVE) ID: CVE-2011-1470 BugTraq ID: 46969 http://www.securityfocus.com/bid/46969 Common Vulnerability Exposure (CVE) ID: CVE-2011-1471 BugTraq ID: 46975 http://www.securityfocus.com/bid/46975 Debian Security Information: DSA-2266 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-1928 44558 http://secunia.com/advisories/44558 44613 http://secunia.com/advisories/44613 44661 http://secunia.com/advisories/44661 44780 http://secunia.com/advisories/44780 48308 ADV-2011-1289 http://www.vupen.com/english/advisories/2011/1289 ADV-2011-1290 http://www.vupen.com/english/advisories/2011/1290 HPSBOV02822 MDVSA-2011:095 http://www.mandriva.com/security/advisories?name=MDVSA-2011:095 RHSA-2011:0844 http://www.redhat.com/support/errata/RHSA-2011-0844.html SSRT100966 [httpd-announce] 20110519 Regressions in httpd 2.2.18, apr 1.4.4, and apr-util 1.3.11 http://mail-archives.apache.org/mod_mbox/httpd-announce/201105.mbox/%3C4DD55092.3030403%40apache.org%3E [oss-security] 20110519 CVE request: DoS in apr due to CVE-2011-0419 fix http://openwall.com/lists/oss-security/2011/05/19/5 [oss-security] 20110519 Re: CVE request: DoS in apr due to CVE-2011-0419 fix http://openwall.com/lists/oss-security/2011/05/19/10 [www-announce] 20110519 Regressions in httpd 2.2.18, apr 1.4.4, and apr-util 1.3.11 http://mail-archives.apache.org/mod_mbox/www-announce/201105.mbox/%3c4DD55076.1060005%40apache.org%3e http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627182 https://issues.apache.org/bugzilla/show_bug.cgi?id=51219 Common Vulnerability Exposure (CVE) ID: CVE-2011-1938 Debian Security Information: DSA-2399 (Google Search) http://www.debian.org/security/2012/dsa-2399 http://www.exploit-db.com/exploits/17318/ http://openwall.com/lists/oss-security/2011/05/24/1 http://openwall.com/lists/oss-security/2011/05/24/9 http://osvdb.org/72644 http://securityreason.com/securityalert/8262 http://securityreason.com/securityalert/8294 XForce ISS Database: php-socketconnect-bo(67606) https://exchange.xforce.ibmcloud.com/vulnerabilities/67606 Common Vulnerability Exposure (CVE) ID: CVE-2011-1945 44935 http://secunia.com/advisories/44935 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html DSA-2309 http://www.debian.org/security/2011/dsa-2309 MDVSA-2011:136 http://www.mandriva.com/security/advisories?name=MDVSA-2011:136 MDVSA-2011:137 http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 SUSE-SU-2011:0636 https://hermes.opensuse.org/messages/8764170 VU#536044 http://www.kb.cert.org/vuls/id/536044 http://eprint.iacr.org/2011/232.pdf http://support.apple.com/kb/HT5784 http://www.kb.cert.org/vuls/id/MAPG-8FENZ3 openSUSE-SU-2011:0634 https://hermes.opensuse.org/messages/8760466 Common Vulnerability Exposure (CVE) ID: CVE-2011-2192 1025713 http://www.securitytracker.com/id?1025713 45067 http://secunia.com/advisories/45067 45088 http://secunia.com/advisories/45088 45144 http://secunia.com/advisories/45144 45181 http://secunia.com/advisories/45181 APPLE-SA-2012-02-01-1 DSA-2271 http://www.debian.org/security/2011/dsa-2271 FEDORA-2011-8586 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061992.html FEDORA-2011-8640 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062287.html MDVSA-2011:116 http://www.mandriva.com/security/advisories?name=MDVSA-2011:116 RHSA-2011:0918 http://www.redhat.com/support/errata/RHSA-2011-0918.html http://curl.haxx.se/curl-gssapi-delegation.patch http://curl.haxx.se/docs/adv_20110623.html http://support.apple.com/kb/HT5130 https://bugzilla.redhat.com/show_bug.cgi?id=711454 Common Vulnerability Exposure (CVE) ID: CVE-2011-2202 BugTraq ID: 48259 http://www.securityfocus.com/bid/48259 http://pastebin.com/1edSuSVN http://openwall.com/lists/oss-security/2011/06/12/5 http://openwall.com/lists/oss-security/2011/06/13/15 RedHat Security Advisories: RHSA-2012:0071 http://rhn.redhat.com/errata/RHSA-2012-0071.html http://securitytracker.com/id?1025659 http://secunia.com/advisories/44874 XForce ISS Database: php-sapiposthandlerfunc-sec-bypass(67999) https://exchange.xforce.ibmcloud.com/vulnerabilities/67999 Common Vulnerability Exposure (CVE) ID: CVE-2011-2483 Debian Security Information: DSA-2340 (Google Search) http://www.debian.org/security/2011/dsa-2340 http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 http://www.mandriva.com/security/advisories?name=MDVSA-2011:180 http://freshmeat.net/projects/crypt_blowfish http://www.redhat.com/support/errata/RHSA-2011-1377.html http://www.redhat.com/support/errata/RHSA-2011-1378.html SuSE Security Announcement: SUSE-SA:2011:035 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html http://www.ubuntu.com/usn/USN-1229-1 XForce ISS Database: php-cryptblowfish-info-disclosure(69319) https://exchange.xforce.ibmcloud.com/vulnerabilities/69319 Common Vulnerability Exposure (CVE) ID: CVE-2011-3182 20110819 PHP 5.3.6 multiple null pointer dereference http://marc.info/?l=full-disclosure&m=131373057621672&w=2 http://securityreason.com/achievement_securityalert/101 49249 http://www.securityfocus.com/bid/49249 MDVSA-2011:165 [oss-security] 20110822 CVE assignment php NULL pointer dereference - CVE-2011-3182 http://www.openwall.com/lists/oss-security/2011/08/22/9 php-library-functions-dos(69430) https://exchange.xforce.ibmcloud.com/vulnerabilities/69430 Common Vulnerability Exposure (CVE) ID: CVE-2011-3189 45678 http://secunia.com/advisories/45678 74726 http://osvdb.org/74726 [oss-security] 20110823 CVE assignment - PHP salt flaw CVE-2011-3189 http://www.openwall.com/lists/oss-security/2011/08/23/4 http://www.php.net/ChangeLog-5.php#5.3.8 http://www.php.net/archive/2011.php#id2011-08-23-1 https://bugs.gentoo.org/show_bug.cgi?id=380261 https://bugs.php.net/bug.php?id=55439 php-crypt-security-bypass(69429) https://exchange.xforce.ibmcloud.com/vulnerabilities/69429 Common Vulnerability Exposure (CVE) ID: CVE-2011-3192 BugTraq ID: 49303 http://www.securityfocus.com/bid/49303 CERT/CC vulnerability note: VU#405811 http://www.kb.cert.org/vuls/id/405811 Cisco Security Advisory: 20110830 Apache HTTPd Range Header Denial of Service Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b90d73.shtml http://www.exploit-db.com/exploits/17696 http://seclists.org/fulldisclosure/2011/Aug/175 http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0285.html HPdes Security Advisory: HPSBMU02766 http://marc.info/?l=bugtraq&m=133477473521382&w=2 HPdes Security Advisory: HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPdes Security Advisory: SSRT100624 HPdes Security Advisory: SSRT100852 http://www.mandriva.com/security/advisories?name=MDVSA-2011:130 http://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/%3c20110824161640.122D387DD@minotaur.apache.org%3e http://mail-archives.apache.org/mod_mbox/httpd-dev/201108.mbox/%3cCAAPSnn2PO-d-C4nQt_TES2RRWiZr7urefhTKPWBC1b+K1Dqc7g@mail.gmail.com%3e https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E http://osvdb.org/74721 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14824 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18827 http://www.redhat.com/support/errata/RHSA-2011-1245.html http://www.redhat.com/support/errata/RHSA-2011-1294.html http://www.redhat.com/support/errata/RHSA-2011-1300.html http://www.redhat.com/support/errata/RHSA-2011-1329.html http://www.redhat.com/support/errata/RHSA-2011-1330.html http://www.redhat.com/support/errata/RHSA-2011-1369.html http://securitytracker.com/id?1025960 http://secunia.com/advisories/45606 http://secunia.com/advisories/45937 http://secunia.com/advisories/46000 http://secunia.com/advisories/46125 http://secunia.com/advisories/46126 SuSE Security Announcement: SUSE-SU-2011:1000 (Google Search) SuSE Security Announcement: SUSE-SU-2011:1007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html SuSE Security Announcement: SUSE-SU-2011:1010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html SuSE Security Announcement: SUSE-SU-2011:1216 (Google Search) SuSE Security Announcement: openSUSE-SU-2011:0993 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html http://www.ubuntu.com/usn/USN-1199-1 XForce ISS Database: apache-http-byterange-dos(69396) https://exchange.xforce.ibmcloud.com/vulnerabilities/69396 Common Vulnerability Exposure (CVE) ID: CVE-2011-3267 http://osvdb.org/74739 XForce ISS Database: php-errorlog-dos(69428) https://exchange.xforce.ibmcloud.com/vulnerabilities/69428 Common Vulnerability Exposure (CVE) ID: CVE-2011-3268 http://osvdb.org/74738 XForce ISS Database: php-crypt-bo(69427) https://exchange.xforce.ibmcloud.com/vulnerabilities/69427 Common Vulnerability Exposure (CVE) ID: CVE-2011-3207 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065744.html http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065712.html http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html HPdes Security Advisory: HPSBMU02752 HPdes Security Advisory: SSRT100802 http://www.redhat.com/support/errata/RHSA-2011-1409.html http://www.securitytracker.com/id?1026012 http://secunia.com/advisories/45956 Common Vulnerability Exposure (CVE) ID: CVE-2011-3210 1026012 HPSBUX02734 http://marc.info/?l=bugtraq&m=132750648501816&w=2 SSRT100729 http://cvs.openssl.org/chngview?cn=21337 http://openssl.org/news/secadv_20110906.txt https://bugzilla.redhat.com/show_bug.cgi?id=736079 Common Vulnerability Exposure (CVE) ID: CVE-2011-3348 BugTraq ID: 49616 http://www.securityfocus.com/bid/49616 http://www.mandriva.com/security/advisories?name=MDVSA-2011:168 http://community.jboss.org/message/625307 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14941 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18154 http://www.redhat.com/support/errata/RHSA-2011-1391.html RedHat Security Advisories: RHSA-2012:0542 http://rhn.redhat.com/errata/RHSA-2012-0542.html RedHat Security Advisories: RHSA-2012:0543 http://rhn.redhat.com/errata/RHSA-2012-0543.html http://www.securitytracker.com/id?1026054 http://secunia.com/advisories/46013 XForce ISS Database: apache-modproxyajp-dos(69804) https://exchange.xforce.ibmcloud.com/vulnerabilities/69804 Common Vulnerability Exposure (CVE) ID: CVE-2011-3368 AIX APAR: SE49723 http://www-01.ibm.com/support/docview.wss?uid=nas2064c7e5f53452ff686257927003c8d42 AIX APAR: SE49724 http://www-01.ibm.com/support/docview.wss?uid=nas2b7c57b1f1035675186257927003c8d48 http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html BugTraq ID: 49957 http://www.securityfocus.com/bid/49957 Debian Security Information: DSA-2405 (Google Search) http://www.debian.org/security/2012/dsa-2405 http://www.exploit-db.com/exploits/17969 http://seclists.org/fulldisclosure/2011/Oct/232 http://seclists.org/fulldisclosure/2011/Oct/273 HPdes Security Advisory: HPSBMU02748 http://marc.info/?l=bugtraq&m=133294460209056&w=2 HPdes Security Advisory: SSRT100772 http://www.mandriva.com/security/advisories?name=MDVSA-2011:144 http://www.contextis.com/research/blog/reverseproxybypass/ http://web.archiveorange.com/archive/v/ZyS0hzECD5zzb2NkvQlt https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E http://osvdb.org/76079 http://www.redhat.com/support/errata/RHSA-2011-1392.html http://www.securitytracker.com/id?1026144 http://secunia.com/advisories/46288 http://secunia.com/advisories/46414 http://secunia.com/advisories/48551 SuSE Security Announcement: openSUSE-SU-2013:0243 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html SuSE Security Announcement: openSUSE-SU-2013:0248 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html XForce ISS Database: apache-modproxy-information-disclosure(70336) https://exchange.xforce.ibmcloud.com/vulnerabilities/70336 Common Vulnerability Exposure (CVE) ID: CVE-2011-3639 DSA-2405 RHSA-2012:0128 http://rhn.redhat.com/errata/RHSA-2012-0128.html http://svn.apache.org/viewvc?view=revision&revision=1188745 https://bugzilla.redhat.com/show_bug.cgi?id=752080 Common Vulnerability Exposure (CVE) ID: CVE-2011-3846 http://secunia.com/advisories/43012 Common Vulnerability Exposure (CVE) ID: CVE-2012-0135 HPdes Security Advisory: HPSBMU02764 http://www.securityfocus.com/archive/1/522374 HPdes Security Advisory: SSRT100827 http://www.securitytracker.com/id?1026925 XForce ISS Database: hp-system-homepage-dos(74917) https://exchange.xforce.ibmcloud.com/vulnerabilities/74917 Common Vulnerability Exposure (CVE) ID: CVE-2012-1993 XForce ISS Database: hp-system-homepage-priv-esc(74918) https://exchange.xforce.ibmcloud.com/vulnerabilities/74918
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.