受影响系统:
Apache Software Foundation Apache 2.0a9
Apache Software Foundation Apache 2.0.49
Apache Software Foundation Apache 2.0.48
Apache Software Foundation Apache 2.0.47
Apache Software Foundation Apache 2.0.46
Apache Software Foundation Apache 2.0.45
Apache Software Foundation Apache 2.0.44
Apache Software Foundation Apache 2.0.43
Apache Software Foundation Apache 2.0.42
Apache Software Foundation Apache 2.0.41
Apache Software Foundation Apache 2.0.40
Apache Software Foundation Apache 2.0.39
Apache Software Foundation Apache 2.0.38
Apache Software Foundation Apache 2.0.37
Apache Software Foundation Apache 2.0.36
Apache Software Foundation Apache 2.0.35
Apache Software Foundation Apache 2.0.32
Apache Software Foundation Apache 2.0.28
Apache Software Foundation Apache 2.0
Apache Software Foundation Apache 1.3.29
Apache Software Foundation Apache 1.3.28
Apache Software Foundation Apache 1.3.26
Apache Software Foundation Apache 1.3.25
Apache Software Foundation Apache 1.3.24
Apache Software Foundation Apache 1.3.23
Apache Software Foundation Apache 1.3.22
Apache Software Foundation Apache 1.3.20
Apache Software Foundation Apache 1.3.19
Apache Software Foundation Apache 1.3.18
Apache Software Foundation Apache 1.3.17
Apache Software Foundation Apache 1.3.14
Apache Software Foundation Apache 1.3.12
Apache Software Foundation Apache 1.3.11
Apache Software Foundation Apache 1.3
Apache Software Foundation Apache 1.3.27
- Conectiva Linux 9.0
- Conectiva Linux 8.0
- Debian Linux 3.0
- IBM AIX 4.3.3
- RedHat Enterprise Linux WS 2.1
- RedHat Enterprise Linux ES 3
- RedHat Enterprise Linux ES 2.1
- RedHat Enterprise Linux AS 3
- RedHat Enterprise Linux AS 2.1
- RedHat Linux 8.0
- RedHat Linux 7.3
- SGI IRIX 6.5.19
- SuSE Linux 8.2
- SuSE Linux 8.1
详细描述:
Mod_SSL是Apache服务器上的SSL实现,用来为Apache Web服务器提供加密支持。Apache mod_ssl模块uuencode二进制数据工具代码存在一个缓冲区溢出漏洞,远程攻击者可以利用这个漏洞对此模块进行拒绝服务攻击或可能以WEB进程执行任意指令。
目前还不确定是否能在X86结构上执行任意代码,其他结构可能被利用为执行任意指令。目前没有详细漏洞细节提供。
目前厂商还没有提供补丁或者升级程序。