Synopsis

Moderate: httpd security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Topic

Updated httpd packages that fix a security issue, various bugs, and add
enhancements are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The Apache HTTP Server is a popular and freely-available Web server.

A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
a reverse proxy is configured, a remote attacker could send a carefully
crafted request that would cause the Apache child process handling that
request to crash. On sites where a forward proxy is configured, an attacker
could cause a similar crash if a user could be persuaded to visit a
malicious site using the proxy. This could lead to a denial of service if
using a threaded Multi-Processing Module. (CVE-2007-3847)

As well, these updated packages fix the following bugs:

• the default "/etc/logrotate.d/httpd" script incorrectly invoked the kill
  command, instead of using the "/sbin/service httpd restart" command. If you
  configured the httpd PID to be in a location other than
  "/var/run/httpd.pid", the httpd logs failed to be rotated. This has been
  resolved in these updated packages.
  
• Set-Cookie headers with a status code of 3xx are not forwarded to
  clients when the "ProxyErrorOverride" directive is enabled. These
  responses are overridden at the proxy. Only the responses with status
  codes of 4xx and 5xx are overridden in these updated packages.
  
• mod_proxy did not correctly handle percent-encoded characters (ie %20)
  when configured as a reverse proxy.
  
• invalid HTTP status codes could be logged if output filters returned
  errors.
  
• the "ProxyTimeout" directive was not inherited across virtual host
  definitions.
  
• in some cases the Content-Length header was dropped from HEAD responses.
  This resulted in certain sites not working correctly with mod_proxy, such
  as www.windowsupdate.com.
  

This update adds the following enhancements:

• a new configuration option has been added, "ServerTokens Full-Release",
  which adds the package release to the server version string, which is
  returned in the "Server" response header.
  
• a new module has been added, mod_version, which allows configuration
  files to be written containing sections, which are evaluated only if the
  version of httpd used matches a specified condition.
  

Users of httpd are advised to upgrade to these updated packages, which
resolve these issues and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 173467 - windowsupdate.microsoft.com does not work with mod_proxy
• BZ - 197915 - %>s incorrectly logs status code as 70007 - default handler returns output filter apr_status_t value
• BZ - 233254 - mod_proxy not handling percent chars in URLs correctly
• BZ - 240022 - Mod_proxy_http ProxyErrorOverride eating cookies
• BZ - 241407 - logrotate.d/httpd postrotate must use initscripts
• BZ - 242920 - Reverse Proxy Unexpected Timeout
• BZ - 248696 - Identify httpd version to configuration
• BZ - 250731 - CVE-2007-3847 httpd out of bounds read

CVEs

• CVE-2007-3847

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 4

SRPM
httpd-2.0.52-38.ent.src.rpm	SHA-256: 04f703e589e45241c8f6c3e934eef1d2f30ae08e56f8e4db64af60605ad0bdd8
x86_64
httpd-2.0.52-38.ent.x86_64.rpm	SHA-256: fe55e95d18d3f7d54267ab5c035d0bbf602b29217a2bccb0e89e53aa3681bdd9
httpd-2.0.52-38.ent.x86_64.rpm	SHA-256: fe55e95d18d3f7d54267ab5c035d0bbf602b29217a2bccb0e89e53aa3681bdd9
httpd-devel-2.0.52-38.ent.x86_64.rpm	SHA-256: 9868563d56187f994220d840aa874d6f566ea20facd100822c9f357f7758a5f6
httpd-devel-2.0.52-38.ent.x86_64.rpm	SHA-256: 9868563d56187f994220d840aa874d6f566ea20facd100822c9f357f7758a5f6
httpd-manual-2.0.52-38.ent.x86_64.rpm	SHA-256: 9974097e68a5707857723722ad4b33ad9f021448a68f7f7e59408465ad7af9f3
httpd-manual-2.0.52-38.ent.x86_64.rpm	SHA-256: 9974097e68a5707857723722ad4b33ad9f021448a68f7f7e59408465ad7af9f3
httpd-suexec-2.0.52-38.ent.x86_64.rpm	SHA-256: 3616b50cf25d57f8d2d83aa4abd62c980abef35297e39f52275d511e2f0ed663
httpd-suexec-2.0.52-38.ent.x86_64.rpm	SHA-256: 3616b50cf25d57f8d2d83aa4abd62c980abef35297e39f52275d511e2f0ed663
mod_ssl-2.0.52-38.ent.x86_64.rpm	SHA-256: c8bd425b4e7d55f565daa1b69efc794080668d9dc6ee2fceb33b0229b067c6b5
mod_ssl-2.0.52-38.ent.x86_64.rpm	SHA-256: c8bd425b4e7d55f565daa1b69efc794080668d9dc6ee2fceb33b0229b067c6b5
ia64
httpd-2.0.52-38.ent.ia64.rpm	SHA-256: efe695b90e0caaa45d5a380ed2e188aba5fb611530bcf66d2663e6c3517dbc0e
httpd-2.0.52-38.ent.ia64.rpm	SHA-256: efe695b90e0caaa45d5a380ed2e188aba5fb611530bcf66d2663e6c3517dbc0e
httpd-devel-2.0.52-38.ent.ia64.rpm	SHA-256: 9a4d34bcddc2820128f36596b6a89abb077138563c021886ce87cfd8dabb0073
httpd-devel-2.0.52-38.ent.ia64.rpm	SHA-256: 9a4d34bcddc2820128f36596b6a89abb077138563c021886ce87cfd8dabb0073
httpd-manual-2.0.52-38.ent.ia64.rpm	SHA-256: 08dcc05c82d6ccb86c2b1a74221d3b7de7f1e9ada1bdafe3ae2cf81cfeaceb55
httpd-manual-2.0.52-38.ent.ia64.rpm	SHA-256: 08dcc05c82d6ccb86c2b1a74221d3b7de7f1e9ada1bdafe3ae2cf81cfeaceb55
httpd-suexec-2.0.52-38.ent.ia64.rpm	SHA-256: bed601d5c50b7c86b8920f8313cec435f9682d30c0a87308799d5632e12c82e6
httpd-suexec-2.0.52-38.ent.ia64.rpm	SHA-256: bed601d5c50b7c86b8920f8313cec435f9682d30c0a87308799d5632e12c82e6
mod_ssl-2.0.52-38.ent.ia64.rpm	SHA-256: dc6c7b994a2c8b5d68f5a75783f51640aa066b610fbb5a8689446d25f00c4b7c
mod_ssl-2.0.52-38.ent.ia64.rpm	SHA-256: dc6c7b994a2c8b5d68f5a75783f51640aa066b610fbb5a8689446d25f00c4b7c
i386
httpd-2.0.52-38.ent.i386.rpm	SHA-256: cc378e798f282655a32a840fa1fc575f269b4fa2f7dea2b993eedcf14d40bc23
httpd-2.0.52-38.ent.i386.rpm	SHA-256: cc378e798f282655a32a840fa1fc575f269b4fa2f7dea2b993eedcf14d40bc23
httpd-devel-2.0.52-38.ent.i386.rpm	SHA-256: af666cada86d7265903f2891269116e332023e4ec3437d58933ae530a7bb0408
httpd-devel-2.0.52-38.ent.i386.rpm	SHA-256: af666cada86d7265903f2891269116e332023e4ec3437d58933ae530a7bb0408
httpd-manual-2.0.52-38.ent.i386.rpm	SHA-256: 0a666e70e8729925a95d539679ff8a7796860b233b0200faa919c2693e56a10a
httpd-manual-2.0.52-38.ent.i386.rpm	SHA-256: 0a666e70e8729925a95d539679ff8a7796860b233b0200faa919c2693e56a10a
httpd-suexec-2.0.52-38.ent.i386.rpm	SHA-256: 5e5e8aaeae9c065512fe065dcf0c01f0ea45386bf32067ce6c65ecd1626eb63c
httpd-suexec-2.0.52-38.ent.i386.rpm	SHA-256: 5e5e8aaeae9c065512fe065dcf0c01f0ea45386bf32067ce6c65ecd1626eb63c
mod_ssl-2.0.52-38.ent.i386.rpm	SHA-256: 5502d87e924e8dd48fdc3b4ba51df1e1702411d771ce71e8d14075aa385b09b8
mod_ssl-2.0.52-38.ent.i386.rpm	SHA-256: 5502d87e924e8dd48fdc3b4ba51df1e1702411d771ce71e8d14075aa385b09b8

Red Hat Enterprise Linux Workstation 4

SRPM
httpd-2.0.52-38.ent.src.rpm	SHA-256: 04f703e589e45241c8f6c3e934eef1d2f30ae08e56f8e4db64af60605ad0bdd8
x86_64
httpd-2.0.52-38.ent.x86_64.rpm	SHA-256: fe55e95d18d3f7d54267ab5c035d0bbf602b29217a2bccb0e89e53aa3681bdd9
httpd-devel-2.0.52-38.ent.x86_64.rpm	SHA-256: 9868563d56187f994220d840aa874d6f566ea20facd100822c9f357f7758a5f6
httpd-manual-2.0.52-38.ent.x86_64.rpm	SHA-256: 9974097e68a5707857723722ad4b33ad9f021448a68f7f7e59408465ad7af9f3
httpd-suexec-2.0.52-38.ent.x86_64.rpm	SHA-256: 3616b50cf25d57f8d2d83aa4abd62c980abef35297e39f52275d511e2f0ed663
mod_ssl-2.0.52-38.ent.x86_64.rpm	SHA-256: c8bd425b4e7d55f565daa1b69efc794080668d9dc6ee2fceb33b0229b067c6b5
ia64
httpd-2.0.52-38.ent.ia64.rpm	SHA-256: efe695b90e0caaa45d5a380ed2e188aba5fb611530bcf66d2663e6c3517dbc0e
httpd-devel-2.0.52-38.ent.ia64.rpm	SHA-256: 9a4d34bcddc2820128f36596b6a89abb077138563c021886ce87cfd8dabb0073
httpd-manual-2.0.52-38.ent.ia64.rpm	SHA-256: 08dcc05c82d6ccb86c2b1a74221d3b7de7f1e9ada1bdafe3ae2cf81cfeaceb55
httpd-suexec-2.0.52-38.ent.ia64.rpm	SHA-256: bed601d5c50b7c86b8920f8313cec435f9682d30c0a87308799d5632e12c82e6
mod_ssl-2.0.52-38.ent.ia64.rpm	SHA-256: dc6c7b994a2c8b5d68f5a75783f51640aa066b610fbb5a8689446d25f00c4b7c
i386
httpd-2.0.52-38.ent.i386.rpm	SHA-256: cc378e798f282655a32a840fa1fc575f269b4fa2f7dea2b993eedcf14d40bc23
httpd-devel-2.0.52-38.ent.i386.rpm	SHA-256: af666cada86d7265903f2891269116e332023e4ec3437d58933ae530a7bb0408
httpd-manual-2.0.52-38.ent.i386.rpm	SHA-256: 0a666e70e8729925a95d539679ff8a7796860b233b0200faa919c2693e56a10a
httpd-suexec-2.0.52-38.ent.i386.rpm	SHA-256: 5e5e8aaeae9c065512fe065dcf0c01f0ea45386bf32067ce6c65ecd1626eb63c
mod_ssl-2.0.52-38.ent.i386.rpm	SHA-256: 5502d87e924e8dd48fdc3b4ba51df1e1702411d771ce71e8d14075aa385b09b8

Red Hat Enterprise Linux Desktop 4

SRPM
httpd-2.0.52-38.ent.src.rpm	SHA-256: 04f703e589e45241c8f6c3e934eef1d2f30ae08e56f8e4db64af60605ad0bdd8
x86_64
httpd-2.0.52-38.ent.x86_64.rpm	SHA-256: fe55e95d18d3f7d54267ab5c035d0bbf602b29217a2bccb0e89e53aa3681bdd9
httpd-devel-2.0.52-38.ent.x86_64.rpm	SHA-256: 9868563d56187f994220d840aa874d6f566ea20facd100822c9f357f7758a5f6
httpd-manual-2.0.52-38.ent.x86_64.rpm	SHA-256: 9974097e68a5707857723722ad4b33ad9f021448a68f7f7e59408465ad7af9f3
httpd-suexec-2.0.52-38.ent.x86_64.rpm	SHA-256: 3616b50cf25d57f8d2d83aa4abd62c980abef35297e39f52275d511e2f0ed663
mod_ssl-2.0.52-38.ent.x86_64.rpm	SHA-256: c8bd425b4e7d55f565daa1b69efc794080668d9dc6ee2fceb33b0229b067c6b5
i386
httpd-2.0.52-38.ent.i386.rpm	SHA-256: cc378e798f282655a32a840fa1fc575f269b4fa2f7dea2b993eedcf14d40bc23
httpd-devel-2.0.52-38.ent.i386.rpm	SHA-256: af666cada86d7265903f2891269116e332023e4ec3437d58933ae530a7bb0408
httpd-manual-2.0.52-38.ent.i386.rpm	SHA-256: 0a666e70e8729925a95d539679ff8a7796860b233b0200faa919c2693e56a10a
httpd-suexec-2.0.52-38.ent.i386.rpm	SHA-256: 5e5e8aaeae9c065512fe065dcf0c01f0ea45386bf32067ce6c65ecd1626eb63c
mod_ssl-2.0.52-38.ent.i386.rpm	SHA-256: 5502d87e924e8dd48fdc3b4ba51df1e1702411d771ce71e8d14075aa385b09b8

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
httpd-2.0.52-38.ent.src.rpm	SHA-256: 04f703e589e45241c8f6c3e934eef1d2f30ae08e56f8e4db64af60605ad0bdd8
s390x
httpd-2.0.52-38.ent.s390x.rpm	SHA-256: e9ae095cfdd7f008f54f19e96d8423f2e1b7d03e7756968e0dda33ab77c18a6c
httpd-devel-2.0.52-38.ent.s390x.rpm	SHA-256: 222f9d8bb9faeb6b297d9ef38a9095309264004f43b5cdc990047cd8df772459
httpd-manual-2.0.52-38.ent.s390x.rpm	SHA-256: 012a0c6047485b5cdad46b2d10f277ed8ea55bf010b56fd53ed01475474a12f8
httpd-suexec-2.0.52-38.ent.s390x.rpm	SHA-256: 8e5681382b8ebe74141885e7e26c6498678bbd62fdd6169e343ee8a32587ce2d
mod_ssl-2.0.52-38.ent.s390x.rpm	SHA-256: eaf10457448f46eb5dabf713a797c67c028a6b93c8df76f66cafb6d2a7633ded
s390
httpd-2.0.52-38.ent.s390.rpm	SHA-256: d3f0441c497467f872780b6c09b87d79e4bf43d0c3171b63ed31a51e5fdedd01
httpd-devel-2.0.52-38.ent.s390.rpm	SHA-256: 2c8ab953349a28a47dded237f0fa5bc17895dcb147a96a488dda2aaec96252f8
httpd-manual-2.0.52-38.ent.s390.rpm	SHA-256: 90329ee2edebf5b530debf342da6339fd62562ec348cdd99a7e89bf92c928b60
httpd-suexec-2.0.52-38.ent.s390.rpm	SHA-256: 53bf468efc1334a1c6217b88c33e6730da3c8f090d03e5b8a7c286b8f7e80801
mod_ssl-2.0.52-38.ent.s390.rpm	SHA-256: a90d5491296478e9eb5d4e33e34f9cc0d19ec3eff6a18d701afa651f33d0f4a5

Red Hat Enterprise Linux for Power, big endian 4

SRPM
httpd-2.0.52-38.ent.src.rpm	SHA-256: 04f703e589e45241c8f6c3e934eef1d2f30ae08e56f8e4db64af60605ad0bdd8
ppc
httpd-2.0.52-38.ent.ppc.rpm	SHA-256: 34eb43f3205544baab7019e1e1f65af29e38cad54c9688cfc97f2f5538cbcfe5
httpd-devel-2.0.52-38.ent.ppc.rpm	SHA-256: eab69ebacf44b698aec4acfa73eba3590c0161a53b0a3dc5479f8868aa3f5e27
httpd-manual-2.0.52-38.ent.ppc.rpm	SHA-256: da2fbb66771e0bd94a402cec00dea08e3fbc1cf1bd3037189c3243b66868a6f3
httpd-suexec-2.0.52-38.ent.ppc.rpm	SHA-256: 48601851db39b79bfafa6a85dbbf358621150e0d06fda8e0a4301f61e1180fdf
mod_ssl-2.0.52-38.ent.ppc.rpm	SHA-256: 101bdad365d54ef0e99bd62058d5530e8a80bf2e7de0b669742373adab249877