oss-sec mailing list archives

Re: CVE request: MPM-ITK module for Apache HTTPD

From: Josh Bressers <bressers () redhat com>
Date: Mon, 21 Mar 2011 16:24:38 -0400 (EDT)



----- Original Message -----

Hi,

please assign a CVE id for this issue:

In certain configurations, the MPM-ITK module for Apache HTTPD serves
a
request as root user instead of the run user configured in the HTTPD
configuration:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857


Please use CVE-2011-1176

Thanks.

-- 
    JB

Current thread:

CVE request: MPM-ITK module for Apache HTTPD Stefan Fritsch (Mar 20)
- Re: CVE request: MPM-ITK module for Apache HTTPD Josh Bressers (Mar 21)
  - Re: CVE request: MPM-ITK module for Apache HTTPD Steinar H. Gunderson (Mar 21)