Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id A3DC1200CD2 for ; Thu, 27 Jul 2017 22:26:12 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id A1F7316B8A5; Thu, 27 Jul 2017 20:26:12 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 1CF5516B8A4 for ; Thu, 27 Jul 2017 22:26:10 +0200 (CEST) Received: (qmail 50792 invoked by uid 500); 27 Jul 2017 20:26:10 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 50783 invoked by uid 99); 27 Jul 2017 20:26:10 -0000 Received: from Unknown (HELO svn01-us-west.apache.org) (209.188.14.144) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 27 Jul 2017 20:26:10 +0000 Received: from svn01-us-west.apache.org (localhost [127.0.0.1]) by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id 8AAAB3A0167 for ; Thu, 27 Jul 2017 20:26:09 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: svn commit: r1016055 - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.page/securitydb.xsl security/vulnerabilities_22.html security/vulnerabilities_24.html Date: Thu, 27 Jul 2017 20:26:09 -0000 To: cvs@httpd.apache.org From: buildbot@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20170727202609.8AAAB3A0167@svn01-us-west.apache.org> archived-at: Thu, 27 Jul 2017 20:26:12 -0000 Author: buildbot Date: Thu Jul 27 20:26:09 2017 New Revision: 1016055 Log: Staging update by buildbot for httpd Modified: websites/staging/httpd/trunk/content/ (props changed) websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.page/securitydb.xsl websites/staging/httpd/trunk/content/security/vulnerabilities_22.html websites/staging/httpd/trunk/content/security/vulnerabilities_24.html Propchange: websites/staging/httpd/trunk/content/ ------------------------------------------------------------------------------ --- cms:source-revision (original) +++ cms:source-revision Thu Jul 27 20:26:09 2017 @@ -1 +1 @@ -1803229 +1803232 Modified: websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.page/securitydb.xsl ============================================================================== Binary files - no diff available. Modified: websites/staging/httpd/trunk/content/security/vulnerabilities_22.html ============================================================================== --- websites/staging/httpd/trunk/content/security/vulnerabilities_22.html (original) +++ websites/staging/httpd/trunk/content/security/vulnerabilities_22.html Thu Jul 27 20:26:09 2017 @@ -109,8 +109,8 @@ these vulnerabilities to the Fixed in Apache httpd 2.2.34

- important: - Uninitialized memory reflection in mod_auth_digest + important: + Uninitialized memory reflection in mod_auth_digest (CVE-2017-9788)
- important: - ap_get_basic_auth_pw() Authentication Bypass + important: + ap_get_basic_auth_pw() Authentication Bypass (CVE-2017-3167)
- important: - mod_ssl Null Pointer Dereference + important: + mod_ssl Null Pointer Dereference (CVE-2017-3169)
- important: - ap_find_token() Buffer Overread + important: + ap_find_token() Buffer Overread (CVE-2017-7668)
- important: - mod_mime Buffer Overread + important: + mod_mime Buffer Overread (CVE-2017-7679)

Fixed in Apache httpd 2.2.32

- important: - Apache HTTP Request Parsing Whitespace Defects + important: + Apache HTTP Request Parsing Whitespace Defects (CVE-2016-8743)
- n/a: - HTTP_PROXY environment variable "httpoxy" mitigation + n/a: + HTTP_PROXY environment variable "httpoxy" mitigation (CVE-2016-5387)

Fixed in Apache httpd 2.2.31

- low: - HTTP request smuggling attack against chunked request parser + low: + HTTP request smuggling attack against chunked request parser (CVE-2015-3183)

Fixed in Apache httpd 2.2.29

- important: - mod_cgid denial of service + important: + mod_cgid denial of service (CVE-2014-0231)
- low: - HTTP Trailers processing bypass + low: + HTTP Trailers processing bypass (CVE-2013-5704)
- moderate: - mod_deflate denial of service + moderate: + mod_deflate denial of service (CVE-2014-0118)
- moderate: - mod_status buffer overflow + moderate: + mod_status buffer overflow (CVE-2014-0226)

Fixed in Apache httpd 2.2.27

- low: - mod_log_config crash + low: + mod_log_config crash (CVE-2014-0098)
- moderate: - mod_dav crash + moderate: + mod_dav crash (CVE-2013-6438)

Fixed in Apache httpd 2.2.25

- low: - mod_rewrite log escape filtering + low: + mod_rewrite log escape filtering (CVE-2013-1862)
- moderate: - mod_dav crash + moderate: + mod_dav crash (CVE-2013-1896)

Fixed in Apache httpd 2.2.24

- low: - XSS due to unescaped hostnames + low: + XSS due to unescaped hostnames (CVE-2012-3499)
- moderate: - XSS in mod_proxy_balancer + moderate: + XSS in mod_proxy_balancer (CVE-2012-4558)

Fixed in Apache httpd 2.2.23

- low: - XSS in mod_negotiation when untrusted uploads are supported + low: + XSS in mod_negotiation when untrusted uploads are supported (CVE-2012-2687)
- low: - insecure LD_LIBRARY_PATH handling + low: + insecure LD_LIBRARY_PATH handling (CVE-2012-0883)

Fixed in Apache httpd 2.2.22

- low: - mod_proxy_ajp remote DoS + low: + mod_proxy_ajp remote DoS (CVE-2012-4557)
- low: - mod_setenvif .htaccess privilege escalation + low: + mod_setenvif .htaccess privilege escalation (CVE-2011-3607)
- low: - mod_log_config crash + low: + mod_log_config crash (CVE-2012-0021)
- low: - scoreboard parent DoS + low: + scoreboard parent DoS (CVE-2012-0031)
- moderate: - mod_proxy reverse proxy exposure + moderate: + mod_proxy reverse proxy exposure (CVE-2011-4317)
- moderate: - error responses can expose cookies + moderate: + error responses can expose cookies (CVE-2012-0053)
- moderate: - mod_proxy reverse proxy exposure + moderate: + mod_proxy reverse proxy exposure (CVE-2011-3368)

Fixed in Apache httpd 2.2.21

- moderate: - mod_proxy_ajp remote DoS + moderate: + mod_proxy_ajp remote DoS (CVE-2011-3348)

Fixed in Apache httpd 2.2.20

- important: - Range header remote DoS + important: + Range header remote DoS (CVE-2011-3192)

Fixed in Apache httpd 2.2.19

- moderate: - apr_fnmatch flaw leads to mod_autoindex remote DoS + moderate: + apr_fnmatch flaw leads to mod_autoindex remote DoS (CVE-2011-0419)

Fixed in Apache httpd 2.2.17

- low: - expat DoS + low: + expat DoS (CVE-2009-3720)
- low: - expat DoS + low: + expat DoS (CVE-2009-3560)
- low: - apr_bridage_split_line DoS + low: + apr_bridage_split_line DoS (CVE-2010-1623)

Fixed in Apache httpd 2.2.16

- important: - Timeout detection flaw (mod_proxy_http) + important: + Timeout detection flaw (mod_proxy_http) (CVE-2010-2068)
- low: - mod_cache and mod_dav DoS + low: + mod_cache and mod_dav DoS (CVE-2010-1452)

Fixed in Apache httpd 2.2.15

- important: - mod_isapi module unload flaw + important: + mod_isapi module unload flaw (CVE-2010-0425)
- low: - Subrequest handling of request headers (mod_headers) + low: + Subrequest handling of request headers (mod_headers) (CVE-2010-0434)
- moderate: - mod_proxy_ajp DoS + moderate: + mod_proxy_ajp DoS (CVE-2010-0408)

Fixed in Apache httpd 2.2.14

- low: - mod_proxy_ftp DoS + low: + mod_proxy_ftp DoS (CVE-2009-3094)
- low: - mod_proxy_ftp FTP command injection + low: + mod_proxy_ftp FTP command injection (CVE-2009-3095)
- moderate: - Solaris pollset DoS + moderate: + Solaris pollset DoS (CVE-2009-2699)

Fixed in Apache httpd 2.2.13

- low: - APR apr_palloc heap overflow + low: + APR apr_palloc heap overflow (CVE-2009-2412)

Fixed in Apache httpd 2.2.12

- important: - mod_proxy reverse proxy DoS + important: + mod_proxy reverse proxy DoS (CVE-2009-1890)
- important: - mod_proxy_ajp information disclosure + important: + mod_proxy_ajp information disclosure (CVE-2009-1191)
- low: - mod_deflate DoS + low: + mod_deflate DoS (CVE-2009-1891)
- low: - AllowOverride Options handling bypass + low: + AllowOverride Options handling bypass (CVE-2009-1195)
- low: - CRLF injection in mod_negotiation when untrusted uploads are supported + low: + CRLF injection in mod_negotiation when untrusted uploads are supported (CVE-2008-0456)
- moderate: - APR-util off-by-one overflow + moderate: + APR-util off-by-one overflow (CVE-2009-1956)
- moderate: - APR-util XML DoS + moderate: + APR-util XML DoS (CVE-2009-1955)
- moderate: - APR-util heap underwrite + moderate: + APR-util heap underwrite (CVE-2009-0023)

Fixed in Apache httpd 2.2.10

- important: - Timeout detection flaw (mod_proxy_http) + important: + Timeout detection flaw (mod_proxy_http) (CVE-2010-2791)
- low: - mod_proxy_ftp globbing XSS + low: + mod_proxy_ftp globbing XSS (CVE-2008-2939)

important: - Uninitialized memory reflection in mod_auth_digest + important: + Uninitialized memory reflection in mod_auth_digest (CVE-2017-9788)

important: + Uninitialized memory reflection in mod_auth_digest (CVE-2017-9788)

important: - ap_get_basic_auth_pw() Authentication Bypass + important: + ap_get_basic_auth_pw() Authentication Bypass (CVE-2017-3167)

important: + ap_get_basic_auth_pw() Authentication Bypass (CVE-2017-3167)

important: - mod_ssl Null Pointer Dereference + important: + mod_ssl Null Pointer Dereference (CVE-2017-3169)

important: + mod_ssl Null Pointer Dereference (CVE-2017-3169)

important: - ap_find_token() Buffer Overread + important: + ap_find_token() Buffer Overread (CVE-2017-7668)

important: + ap_find_token() Buffer Overread (CVE-2017-7668)

important: - mod_mime Buffer Overread + important: + mod_mime Buffer Overread (CVE-2017-7679)

important: + mod_mime Buffer Overread (CVE-2017-7679)

Fixed in Apache httpd 2.2.32

important: - Apache HTTP Request Parsing Whitespace Defects + important: + Apache HTTP Request Parsing Whitespace Defects (CVE-2016-8743)

important: + Apache HTTP Request Parsing Whitespace Defects (CVE-2016-8743)

n/a: - HTTP_PROXY environment variable "httpoxy" mitigation + n/a: + HTTP_PROXY environment variable "httpoxy" mitigation (CVE-2016-5387)

n/a: + HTTP_PROXY environment variable "httpoxy" mitigation (CVE-2016-5387)

Fixed in Apache httpd 2.2.31

low: - HTTP request smuggling attack against chunked request parser + low: + HTTP request smuggling attack against chunked request parser (CVE-2015-3183)

low: + HTTP request smuggling attack against chunked request parser (CVE-2015-3183)

Fixed in Apache httpd 2.2.29

important: - mod_cgid denial of service + important: + mod_cgid denial of service (CVE-2014-0231)

important: + mod_cgid denial of service (CVE-2014-0231)

low: - HTTP Trailers processing bypass + low: + HTTP Trailers processing bypass (CVE-2013-5704)

low: + HTTP Trailers processing bypass (CVE-2013-5704)

moderate: - mod_deflate denial of service + moderate: + mod_deflate denial of service (CVE-2014-0118)

moderate: + mod_deflate denial of service (CVE-2014-0118)

moderate: - mod_status buffer overflow + moderate: + mod_status buffer overflow (CVE-2014-0226)

moderate: + mod_status buffer overflow (CVE-2014-0226)

Fixed in Apache httpd 2.2.27

low: - mod_log_config crash + low: + mod_log_config crash (CVE-2014-0098)

low: + mod_log_config crash (CVE-2014-0098)

moderate: - mod_dav crash + moderate: + mod_dav crash (CVE-2013-6438)

moderate: + mod_dav crash (CVE-2013-6438)

Fixed in Apache httpd 2.2.25

low: - mod_rewrite log escape filtering + low: + mod_rewrite log escape filtering (CVE-2013-1862)

low: + mod_rewrite log escape filtering (CVE-2013-1862)

moderate: - mod_dav crash + moderate: + mod_dav crash (CVE-2013-1896)

moderate: + mod_dav crash (CVE-2013-1896)

Fixed in Apache httpd 2.2.24

low: - XSS due to unescaped hostnames + low: + XSS due to unescaped hostnames (CVE-2012-3499)

low: + XSS due to unescaped hostnames (CVE-2012-3499)

moderate: - XSS in mod_proxy_balancer + moderate: + XSS in mod_proxy_balancer (CVE-2012-4558)

moderate: + XSS in mod_proxy_balancer (CVE-2012-4558)

Fixed in Apache httpd 2.2.23

low: - XSS in mod_negotiation when untrusted uploads are supported + low: + XSS in mod_negotiation when untrusted uploads are supported (CVE-2012-2687)

low: + XSS in mod_negotiation when untrusted uploads are supported (CVE-2012-2687)

low: - insecure LD_LIBRARY_PATH handling + low: + insecure LD_LIBRARY_PATH handling (CVE-2012-0883)

low: + insecure LD_LIBRARY_PATH handling (CVE-2012-0883)

Fixed in Apache httpd 2.2.22

low: - mod_proxy_ajp remote DoS + low: + mod_proxy_ajp remote DoS (CVE-2012-4557)

low: + mod_proxy_ajp remote DoS (CVE-2012-4557)

low: - mod_setenvif .htaccess privilege escalation + low: + mod_setenvif .htaccess privilege escalation (CVE-2011-3607)

low: + mod_setenvif .htaccess privilege escalation (CVE-2011-3607)

low: - mod_log_config crash + low: + mod_log_config crash (CVE-2012-0021)

low: + mod_log_config crash (CVE-2012-0021)

low: - scoreboard parent DoS + low: + scoreboard parent DoS (CVE-2012-0031)

low: + scoreboard parent DoS (CVE-2012-0031)

moderate: - mod_proxy reverse proxy exposure + moderate: + mod_proxy reverse proxy exposure (CVE-2011-4317)

moderate: + mod_proxy reverse proxy exposure (CVE-2011-4317)

moderate: - error responses can expose cookies + moderate: + error responses can expose cookies (CVE-2012-0053)

moderate: + error responses can expose cookies (CVE-2012-0053)

moderate: - mod_proxy reverse proxy exposure + moderate: + mod_proxy reverse proxy exposure (CVE-2011-3368)

moderate: + mod_proxy reverse proxy exposure (CVE-2011-3368)

Fixed in Apache httpd 2.2.21

moderate: - mod_proxy_ajp remote DoS + moderate: + mod_proxy_ajp remote DoS (CVE-2011-3348)

moderate: + mod_proxy_ajp remote DoS (CVE-2011-3348)

Fixed in Apache httpd 2.2.20

important: - Range header remote DoS + important: + Range header remote DoS (CVE-2011-3192)

important: + Range header remote DoS (CVE-2011-3192)

Fixed in Apache httpd 2.2.19

moderate: - apr_fnmatch flaw leads to mod_autoindex remote DoS + moderate: + apr_fnmatch flaw leads to mod_autoindex remote DoS (CVE-2011-0419)

moderate: + apr_fnmatch flaw leads to mod_autoindex remote DoS (CVE-2011-0419)

Fixed in Apache httpd 2.2.17

low: - expat DoS + low: + expat DoS (CVE-2009-3720)

low: + expat DoS (CVE-2009-3720)

low: - expat DoS + low: + expat DoS (CVE-2009-3560)

low: + expat DoS (CVE-2009-3560)

low: - apr_bridage_split_line DoS + low: + apr_bridage_split_line DoS (CVE-2010-1623)

low: + apr_bridage_split_line DoS (CVE-2010-1623)

Fixed in Apache httpd 2.2.16

important: - Timeout detection flaw (mod_proxy_http) + important: + Timeout detection flaw (mod_proxy_http) (CVE-2010-2068)

important: - Uninitialized memory reflection in mod_auth_digest +
important: + Uninitialized memory reflection in mod_auth_digest (CVE-2017-9788)

important: - ap_get_basic_auth_pw() Authentication Bypass +
important: + ap_get_basic_auth_pw() Authentication Bypass (CVE-2017-3167)

important: - mod_ssl Null Pointer Dereference +
important: + mod_ssl Null Pointer Dereference (CVE-2017-3169)

important: - ap_find_token() Buffer Overread +
important: + ap_find_token() Buffer Overread (CVE-2017-7668)

important: - mod_mime Buffer Overread +
important: + mod_mime Buffer Overread (CVE-2017-7679)

important: - Apache HTTP Request Parsing Whitespace Defects +
important: + Apache HTTP Request Parsing Whitespace Defects (CVE-2016-8743)

n/a: - HTTP_PROXY environment variable "httpoxy" mitigation +
n/a: + HTTP_PROXY environment variable "httpoxy" mitigation (CVE-2016-5387)

low: - HTTP request smuggling attack against chunked request parser +
low: + HTTP request smuggling attack against chunked request parser (CVE-2015-3183)

important: - mod_cgid denial of service +
important: + mod_cgid denial of service (CVE-2014-0231)

low: - HTTP Trailers processing bypass +
low: + HTTP Trailers processing bypass (CVE-2013-5704)

moderate: - mod_deflate denial of service +
moderate: + mod_deflate denial of service (CVE-2014-0118)

moderate: - mod_status buffer overflow +
moderate: + mod_status buffer overflow (CVE-2014-0226)

low: - mod_log_config crash +
low: + mod_log_config crash (CVE-2014-0098)

moderate: - mod_dav crash +
moderate: + mod_dav crash (CVE-2013-6438)

low: - mod_rewrite log escape filtering +
low: + mod_rewrite log escape filtering (CVE-2013-1862)

moderate: - mod_dav crash +
moderate: + mod_dav crash (CVE-2013-1896)

low: - XSS due to unescaped hostnames +
low: + XSS due to unescaped hostnames (CVE-2012-3499)

moderate: - XSS in mod_proxy_balancer +
moderate: + XSS in mod_proxy_balancer (CVE-2012-4558)

low: - XSS in mod_negotiation when untrusted uploads are supported +
low: + XSS in mod_negotiation when untrusted uploads are supported (CVE-2012-2687)

low: - insecure LD_LIBRARY_PATH handling +
low: + insecure LD_LIBRARY_PATH handling (CVE-2012-0883)

low: - mod_proxy_ajp remote DoS +
low: + mod_proxy_ajp remote DoS (CVE-2012-4557)

low: - mod_setenvif .htaccess privilege escalation +
low: + mod_setenvif .htaccess privilege escalation (CVE-2011-3607)

low: - mod_log_config crash +
low: + mod_log_config crash (CVE-2012-0021)

low: - scoreboard parent DoS +
low: + scoreboard parent DoS (CVE-2012-0031)

moderate: - mod_proxy reverse proxy exposure +
moderate: + mod_proxy reverse proxy exposure (CVE-2011-4317)

moderate: - error responses can expose cookies +
moderate: + error responses can expose cookies (CVE-2012-0053)

moderate: - mod_proxy reverse proxy exposure +
moderate: + mod_proxy reverse proxy exposure (CVE-2011-3368)

moderate: - mod_proxy_ajp remote DoS +
moderate: + mod_proxy_ajp remote DoS (CVE-2011-3348)

important: - Range header remote DoS +
important: + Range header remote DoS (CVE-2011-3192)

moderate: - apr_fnmatch flaw leads to mod_autoindex remote DoS +
moderate: + apr_fnmatch flaw leads to mod_autoindex remote DoS (CVE-2011-0419)

low: - expat DoS +
low: + expat DoS (CVE-2009-3720)

low: - expat DoS +
low: + expat DoS (CVE-2009-3560)

low: - apr_bridage_split_line DoS +
low: + apr_bridage_split_line DoS (CVE-2010-1623)

important: - Timeout detection flaw (mod_proxy_http) +
important: + Timeout detection flaw (mod_proxy_http) (CVE-2010-2068)

low: - mod_cache and mod_dav DoS +
low: + mod_cache and mod_dav DoS (CVE-2010-1452)

important: - mod_isapi module unload flaw +
important: + mod_isapi module unload flaw (CVE-2010-0425)

low: - Subrequest handling of request headers (mod_headers) +
low: + Subrequest handling of request headers (mod_headers) (CVE-2010-0434)

moderate: - mod_proxy_ajp DoS +
moderate: + mod_proxy_ajp DoS (CVE-2010-0408)

low: - mod_proxy_ftp DoS +
low: + mod_proxy_ftp DoS (CVE-2009-3094)

low: - mod_proxy_ftp FTP command injection +
low: + mod_proxy_ftp FTP command injection (CVE-2009-3095)

moderate: - Solaris pollset DoS +
moderate: + Solaris pollset DoS (CVE-2009-2699)

low: - APR apr_palloc heap overflow +
low: + APR apr_palloc heap overflow (CVE-2009-2412)

important: - mod_proxy reverse proxy DoS +
important: + mod_proxy reverse proxy DoS (CVE-2009-1890)

important: - mod_proxy_ajp information disclosure +
important: + mod_proxy_ajp information disclosure (CVE-2009-1191)

low: - mod_deflate DoS +
low: + mod_deflate DoS (CVE-2009-1891)

low: - AllowOverride Options handling bypass +
low: + AllowOverride Options handling bypass (CVE-2009-1195)

low: - CRLF injection in mod_negotiation when untrusted uploads are supported +
low: + CRLF injection in mod_negotiation when untrusted uploads are supported (CVE-2008-0456)

moderate: - APR-util off-by-one overflow +
moderate: + APR-util off-by-one overflow (CVE-2009-1956)

moderate: - APR-util XML DoS +
moderate: + APR-util XML DoS (CVE-2009-1955)

moderate: - APR-util heap underwrite +
moderate: + APR-util heap underwrite (CVE-2009-0023)

important: - Timeout detection flaw (mod_proxy_http) +
important: + Timeout detection flaw (mod_proxy_http) (CVE-2010-2791)

low: - mod_proxy_ftp globbing XSS +
low: + mod_proxy_ftp globbing XSS (CVE-2008-2939)

low: - mod_proxy_balancer CSRF +
low: + mod_proxy_balancer CSRF (CVE-2007-6420)

moderate: - mod_proxy_http DoS +
moderate: + mod_proxy_http DoS (CVE-2008-2364)

low: - mod_proxy_ftp UTF-7 XSS +
low: + mod_proxy_ftp UTF-7 XSS (CVE-2008-0005)

low: - mod_proxy_balancer DoS +
low: + mod_proxy_balancer DoS (CVE-2007-6422)

low: - mod_proxy_balancer XSS +
low: + mod_proxy_balancer XSS (CVE-2007-6421)

moderate: - mod_status XSS +
moderate: + mod_status XSS (CVE-2007-6388)

moderate: - mod_imagemap XSS +
moderate: + mod_imagemap XSS (CVE-2007-5000)

moderate: - mod_proxy crash +
moderate: + mod_proxy crash (CVE-2007-3847)

moderate: - mod_status cross-site scripting +
moderate: + mod_status cross-site scripting (CVE-2006-5752)

moderate: - Signals to arbitrary processes +
moderate: + Signals to arbitrary processes (CVE-2007-3304)

moderate: - mod_cache information leak +
moderate: + mod_cache information leak (CVE-2007-1862)

moderate: - mod_cache proxy DoS +
moderate: + mod_cache proxy DoS (CVE-2007-1863)