IBM Support

PI13028: CVE-2014-0098: IBM HTTP Server mod_log_config potential vulnerability

Download


Abstract

There is the potential for a denial of service due to a vulnerability in the IBM HTTP Server mod_log_config module.

Download Description

PI13028 resolves the following problem:

ERROR DESCRIPTION:
A vulnerability in the mod_log_config module could result in a denial of service.

PROBLEM SUMMARY:
Potential vulnerability for IBM HTTP Server.

PROBLEM CONCLUSION:
The module was updated to resolve the vulnerability.

This fix is targeted for IBM HTTP Server fixpacks:
- 7.0.0.33
- 8.0.0.9
- 8.5.5.3

Prerequisites

UpdateInstaller is required for IHS 7.0 and 6.1 interim fixes.

[{"PRLabel":"UpdateInstaller","PRLang":"English","PRSize":"7250000","PRPlat":{"label":"AIX","code":"PF002"},"PRURL":"http://www.ibm.com/support/docview.wss?rs=180&uid=swg21205991"}]

Download Package

The fix for IHS 6.1 is included in the PI17025 cumulative interim fix for 6.1.0.47: http://www-01.ibm.com/support/docview.wss?uid=swg24037517

On
[{"DNLabel":"8.5.5.0 - 8.5.5.2 Distributed platforms","DNDate":"15 May 2014","DNLang":"US English","DNSize":"531320","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.5.0-WS-WASIHS-MultiOS-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"8.5.5.0 - 8.5.5.2 z/OS","DNDate":"15 May 2014","DNLang":"US English","DNSize":"306600","DNPlat":{"label":"z/OS","code":"PF035"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.5.0-WS-WASIHS-OS390-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"8.5.0.2 Distributed platforms","DNDate":"15 May 2014","DNLang":"US English","DNSize":"496729","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.0.2-WS-WASIHS-MultiOS-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"8.5.0.2 z/OS","DNDate":"15 May 2014","DNLang":"US English","DNSize":"255005","DNPlat":{"label":"z/OS","code":"PF035"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.0.2-WS-WASIHS-OS390-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"8.0.0.6 - 8.0.0.8 Distributed platforms","DNDate":"15 May 2014","DNLang":"US English","DNSize":"520276","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.0.0.6-WS-WASIHS-MultiOS-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"8.0.0.6 - 8.0.0.8 z/OS","DNDate":"15 May 2014","DNLang":"US English","DNSize":"252424","DNPlat":{"label":"z/OS","code":"PF035"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.0.0.6-WS-WASIHS-OS390-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 AixPPC32","DNDate":"15 May 2014","DNLang":"US English","DNSize":"19676","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-AixPPC32-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 HpuxIA64","DNDate":"15 May 2014","DNLang":"US English","DNSize":"49349","DNPlat":{"label":"HP-UX","code":"PF010"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-HpuxIA64-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 HpuxPaRISC","DNDate":"15 May 2014","DNLang":"US English","DNSize":"19520","DNPlat":{"label":"HP-UX","code":"PF010"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-HpuxPaRISC-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 LinuxPPC32","DNDate":"15 May 2014","DNLang":"US English","DNSize":"22405","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-LinuxPPC32-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 LinuxS390","DNDate":"15 May 2014","DNLang":"US English","DNSize":"22152","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-LinuxS390-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 LinuxX32","DNDate":"15 May 2014","DNLang":"US English","DNSize":"18164","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-LinuxX32-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 SolarisSparc","DNDate":"15 May 2014","DNLang":"US English","DNSize":"21572","DNPlat":{"label":"Solaris","code":"PF027"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-SolarisSparc-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 SolarisX64","DNDate":"15 May 2014","DNLang":"US English","DNSize":"16493","DNPlat":{"label":"Solaris","code":"PF027"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-SolarisX64-IFPI13028","DNURL_FTP":" ","DDURL":" "},{"DNLabel":"7.0.0.29 - 7.0.0.31 WinX32","DNDate":"15 May 2014","DNLang":"US English","DNSize":"40300","DNPlat":{"label":"Windows","code":"PF033"},"DNURL":"http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=7.0.0.29-WS-WASIHS-WinX32-IFPI13028","DNURL_FTP":" ","DDURL":" "}]
[{"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Base Server","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"8.5.5.1;8.5.5;8.5.0.2;7.0.0.31;7.0.0.29;6.1.0.47;8.5.5.2","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
15 June 2018

UID

swg24037539