Red Hat, Inc. Information for VU#395412

Not vulnerable

This issue does not affect the version of Apache httpd as supplied with
Red Hat Enterprise Linux 2.1

The ability to exploit this issue is dependent on the stack layout for
a particular compiled version of mod_rewrite. If the compiler has
added padding to the stack immediately after the buffer being
overwritten, this issue can not be exploited, and Apache httpd will
continue operating normally.

The Red Hat Security Response Team analyzed Red Hat Enterprise Linux 3
and Red Hat Enterprise Linux 4 binaries for all architectures as
shipped by Red Hat and determined that these versions cannot be
exploited.  We therefore do not plan on providing updates for this
issue.

For technical details see:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200219

Vendor Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.