title: Red Hat Security Advisory: httpd security update
description: httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header TLS: MITM attacks via session renegotiation
cpes: cpe:/o:redhat:enterprise_linux:3::as cpe:/o:redhat:enterprise_linux:3::desktop cpe:/o:redhat:enterprise_linux:3::es cpe:/o:redhat:enterprise_linux:3::ws cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::client_workstation cpe:/o:redhat:enterprise_linux:5::server