title: Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update
description: mysql: mysql command line client XSS flaw MySQL: Format string vulnerability by manipulation with database instances (crash) php: exif_read_data crash on corrupted JPEG files httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header postgresql: authenticated user server DoS via plugin re-LOAD-ing postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600 postgresql: LDAP authentication bypass when anonymous LDAP bind are allowed
cpes: cpe:/a:redhat:rhel_application_stack:2