| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.2.0= 2.2.10= 2.2.11= 2.2.12= 2.2.13= 2.2.14= 2.2.15= 2.2.16= 2.2.17= 2.2.18= 2.2.19= 2.2.2= 2.2.20= 2.2.21= 2.2.22= 2.2.23= 2.2.24= 2.2.25= 2.2.26= 2.2.27= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.8= 2.2.9= 2.4.1= 2.4.10= 2.4.2= 2.4.3= 2.4.4= 2.4.6= 2.4.7= 2.4.9 | |
| enterprise manager ops center | = 12.1.4= 12.2.0= 12.2.1= 12.3.0< 12.1.4 | 12.1.4 |
| http server | = 10.1.3.5.0= 11.1.1.7.0= 12.1.2.0= 12.1.3.0 | |
| jboss enterprise web server | = 2.0.0= 3.0.0 |
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free