You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mj...@apache.org on 2012/06/15 10:13:40 UTC
svn commit: r1350515 -
/httpd/site/trunk/content/security/vulnerabilities_22.mdtext
Author: mjc
Date: Fri Jun 15 08:13:40 2012
New Revision: 1350515
URL: http://svn.apache.org/viewvc?rev=1350515&view=rev
Log:
Start trying to get this format looking good so we can then autogenerate it
Modified:
httpd/site/trunk/content/security/vulnerabilities_22.mdtext
Modified: httpd/site/trunk/content/security/vulnerabilities_22.mdtext
URL: http://svn.apache.org/viewvc/httpd/site/trunk/content/security/vulnerabilities_22.mdtext?rev=1350515&r1=1350514&r2=1350515&view=diff
==============================================================================
--- httpd/site/trunk/content/security/vulnerabilities_22.mdtext (original)
+++ httpd/site/trunk/content/security/vulnerabilities_22.mdtext Fri Jun 15 08:13:40 2012
@@ -35,7 +35,7 @@ vulnerabilities to the [Security Team](/
# Fixed in Apache httpd 2.2.22 # {#2.2.22}
-low: <name name="CVE-2011-3607">mod_setenvif.htaccess privilege escalation</name>
+## low: [mod_setenvif.htaccess privilege escalation]{#CVE-2011-3607}
[CVE-2011-3607](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607)
: An integer overflow flaw was found which, when the mod_setenvif module is
enabled, could allow local users to gain privileges via a.htaccess file.
@@ -52,8 +52,7 @@ low: <name name="CVE-2011-3607">mod_sete
2.2.14, 2.2.13, 2.2.12, 2.2.11, 2.2.10, 2.2.9, 2.2.8,<br/>
2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, 2.2.0<br/>
-
-low: <name name="CVE-2012-0021">mod_log_config crash</name>
+## low: <name name="CVE-2012-0021">mod_log_config crash</name>
[CVE-2012-0021](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021)
: A flaw was found in mod_log_config. If the '%{cookiename}C' log format
string is in use, a remote attacker could send a specific cookie causing a