[Bug 256920] Re: nagios2 won't remove/reinstall if /etc/nagios2/apache2.conf is deleted

2008-08-27 Thread Emanuele Gentili
Uploaded Thanks

** Changed in: nagios3 (Ubuntu)
 Assignee: Stefan Lesicnik (stefanlsd) = Emanuele Gentili (emgent)
   Status: In Progress = Fix Committed

-- 
nagios2 won't remove/reinstall if /etc/nagios2/apache2.conf is deleted
https://bugs.launchpad.net/bugs/256920
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nagios2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-07-01 Thread Emanuele Gentili
POC:
http://svn.apache.org/viewvc/httpd/test/framework/trunk/t/security/CVE-2008-2364.t?revision=666283view=markup

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-19 Thread Emanuele Gentili
more info avaiable here:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2364

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-16 Thread Emanuele Gentili
** Changed in: apache2 (Ubuntu Feisty)
 Assignee: (unassigned) = Emanuele Gentili (emgent)

** Changed in: apache2 (Ubuntu Gutsy)
 Assignee: (unassigned) = Emanuele Gentili (emgent)

** Changed in: apache2 (Ubuntu Hardy)
 Assignee: (unassigned) = Emanuele Gentili (emgent)

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-15 Thread Emanuele Gentili
** Changed in: apache2 (Ubuntu Feisty)
   Importance: Undecided = High
   Status: New = In Progress

** Changed in: apache2 (Ubuntu Gutsy)
   Importance: Undecided = High
   Status: New = In Progress

** Changed in: apache2 (Ubuntu Hardy)
   Importance: Undecided = High
   Status: New = In Progress

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-14 Thread Emanuele Gentili

** Attachment added: intrepid_apache2_2.2.8-4ubuntu3.debdiff
   
http://launchpadlibrarian.net/15307756/intrepid_apache2_2.2.8-4ubuntu3.debdiff

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] [NEW] CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili
*** This bug is a security vulnerability ***

Public security bug reported:

The ap_proxy_http_process_response function in mod_proxy_http.c in the
mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not
limit the number of forwarded interim responses, which allows remote
HTTP servers to cause a denial of service (memory consumption) via a
large number of interim responses.

** Affects: apache2 (Ubuntu)
 Importance: High
 Assignee: Emanuele Gentili (emgent)
 Status: Confirmed

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-2364

** Changed in: apache2 (Ubuntu)
   Importance: Undecided = High
 Assignee: (unassigned) = Emanuele Gentili (emgent)
   Status: New = Confirmed

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili
Intrepid fix avaiable by upstream and work fine to solve the problem.

Actually build faild:   
libaprutil1-dev: Depends: libdb4.6-dev but it is not installable

more info:
https://edge.launchpad.net/ubuntu/intrepid/i386/libdb4.6-dev

(i will attach it later)

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili
UPSTREAM FIX:

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154r2=666153pathrev=666154

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili

** Attachment added: gutsy_security_apache2_2.2.4-3ubuntu0.2.debdiff
   
http://launchpadlibrarian.net/15293240/gutsy_security_apache2_2.2.4-3ubuntu0.2.debdiff

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili

** Attachment added: hardy_security_apache2_2.2.8-1ubuntu0.1.debdiff
   
http://launchpadlibrarian.net/15293694/hardy_security_apache2_2.2.8-1ubuntu0.1.debdiff

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili

** Attachment added: feisty_security_apache2_2.2.3-3.2ubuntu2.2.debdiff
   
http://launchpadlibrarian.net/15294355/feisty_security_apache2_2.2.3-3.2ubuntu2.2.debdiff

** Changed in: apache2 (Ubuntu)
   Status: Confirmed = In Progress

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 239894] Re: CVE-2008-2364 Apache2 mod_proxy_http.c DOS

2008-06-13 Thread Emanuele Gentili
@Pitti: can you write here when you solve libdb4.6-dev problem in
intrepid?

-- 
CVE-2008-2364 Apache2 mod_proxy_http.c DOS
https://bugs.launchpad.net/bugs/239894
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs