HP HP-UX

ソフト名：HP HP-UX B.11.11/B.11.23/B.11.31 (Apache 2.2.18未満/2.2.19)

回避策：HPSBUX02702 SSRT100606にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー, 不正HTTPのリクエスト, メモリの浪費

ソース：

http://h71028.www7.hp.com/enterprise/w1/en/os/hpux11i-overview.html

http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02997184

http://secunia.com/advisories/44574/

http://secunia.com/advisories/45606/

http://secunia.com/advisories/45954/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2011-0419, CVE-2011-3192

危険性：Medium Risk

Novell openSUSE

ソフト名：Novell openSUSE 11.3/11.4 (Apache APR, Apache APR-util 1.x)

回避策：openSUSE-SU-2011:0859-1にて対応

脆弱性：DoS攻撃, メモリの浪費, 無限再帰エラー, スタックオーバーフロー, 無限ループ

ソース：

http://www.opensuse.org/en/

https://hermes.opensuse.org/messages/10420089

http://secunia.com/advisories/41701/

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44558/

http://secunia.com/advisories/45465/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

CVE：CVE-2010-1623, CVE-2011-0419, CVE-2011-1928

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11 (Apache APR 1.4.4以下)

回避策：SUSE-SU-2011:0763-1, SUSE-SU-2011:0797-1にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー, 無限ループ, メモリの浪費

ソース：http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/9594430

http://secunia.com/advisories/41701/

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44558/

http://secunia.com/advisories/45304/

http://secunia.com/advisories/45309/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

CVE：CVE-2010-1623, CVE-2011-0419, CVE-2011-1928

危険性：Medium Risk

IBM HTTP Server

ソフト名：IBM HTTP Server 6.1.x/7.0.x

回避策：APAR PM38826, 6.1.0.39/7.0.0.19へのアップデートにて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー, 無限ループ

ソース：http://www-01.ibm.com/software/webservers/httpservers/

http://www.ibm.com/support/docview.wss?uid=swg1PM38826

http://secunia.com/advisories/44574/

http://secunia.com/advisories/44661/

http://secunia.com/advisories/45280/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

CVE：CVE-2011-0419, CVE-2011-1928

危険性：Medium Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 13/14 (Apache APR 1.4.4以下)

回避策：FEDORA-2011-6918, FEDORA-2011-7340にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー, 無限ループ

ソース：https://fedoraproject.org/wiki/F13_one_page_release_notes

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061177.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061183.html

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44558/

http://secunia.com/advisories/44861/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

CVE：CVE-2011-0419, CVE-2011-1928

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 6.06/8.04/10.04/10.10 (Apache APR 1.4.4以下)

回避策：USN-1134-1にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー, 無限ループ, CPUリソースの浪費

ソース：http://www.ubuntu.com/

http://www.ubuntu.com/usn/usn-1134-1/

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44558/

http://secunia.com/advisories/44679/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928

CVE：CVE-2011-0419, CVE-2011-1928

危険性：Medium Risk

IBM OS/400

ソフト名：IBM OS/400 6.x (Apache APR 1.4.4未満)

回避策：APAR SE48097にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー

ソース：http://www-03.ibm.com/systems/i/software/

http://www-01.ibm.com/support/docview.wss?uid=nas2be723d486f51dd5386257895003ca15c

http://secunia.com/advisories/44574/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

CVE：CVE-2011-0419

危険性：Medium Risk

Debian GNU/Linux, Slackware Linux

ソフト名：Debian GNU/Linux 5.0/6.0, Slackware Linux 11.0 (Apache APR 1.4.4未満)

回避策：DSA-2237-1にて対応, SSA:2011-133-01にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー

ソース：http://www.debian.org/

http://www.slackware.com/

http://www.debian.org/security/2011/dsa-2237

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.705697

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44411/

http://secunia.com/advisories/44609/

http://dvw-j.blogspot.com/2011/05/apache-apache-apr-red-hat-desktop-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

CVE：CVE-2011-0419

危険性：Medium Risk

Apache, Apache APR, Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Apache 2.2.18未満, Apache APR 1.4.4未満, Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/HPC Node 6/Server 6/Workstation 6

回避策：アップデートにて対応, RHSA-2011:0507-1にて対応

脆弱性：DoS攻撃, 無限再帰エラー, スタックオーバーフロー

ソース：http://httpd.apache.org/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://httpd.apache.org/security/vulnerabilities_22.html

http://www.apache.org/dist/apr/CHANGES-APR-1.4

http://www.apache.org/dist/httpd/Announcement2.2.html

http://securityreason.com/achievement_securityalert/98

http://rhn.redhat.com/errata/RHSA-2011-0507.html

http://secunia.com/advisories/44490/

http://secunia.com/advisories/44564/

http://secunia.com/advisories/44574/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419

CVE：CVE-2011-0419

危険性：Medium Risk