Apache httpd 2.x.x 2.2.12 vulnerabilities

I had some problems with FMS 3.5.3 apache 2.2.9, after upgrade to apache 2.2.15 the system became stable.
I detect with snort a lot of apache exploit attempts.
Does anyone had problems with Apache 2.2.9?
Best Regards,
Sérgio Henrique

I suppose you might have already done it but if you have not you can just check : http://httpd.apache.org/security/vulnerabilities_22.html to see list of vulnerabilities which were fixed from 2.2.9 to 2.2.15. See if problem you suspect or encountered is listed there

Similar Messages

Apache httpd.conf and Weblogic server integration.

Dear friends,
I am seeing a strange problem in my Apache and weblogic integration work.
In the Apache httpd.conf file, under mod_weblogic.c module, if i dont turn DebugConfigInfo ON then my system is not working properly. always hitting with http 404 error. can you please explain why this is required and if required is it mandatory to turn it ON ?
when i read in weblogic docs, its mentioned as to turn it OFF for security reasons. But if i make it as OFF then my website is not working properly.
Here is the conents of mod_weblogic.c module in my httpd.conf file.
<IfModule mod_weblogic.c>
WebLogicHost rlw1csts08.bpweb.bp.com
WebLogicPort 7001
DebugConfigInfo On
#EnforceBasicConstraints OFF
PathPrepend /csmain-web
ErrorPage /err/serverErrorWL.xml
#WLLogFile "| /export/home/wwwst08/apache/bin/rotatelogs /export/home/wwwst08/apache/logs/WL_apache_error.log.%Y%m%d%H%M%S 86400"
WLLogFile "/export/home/wwwst08/apache/logs/WL_apache_error.log"
</IfModule>
Please let me know your inputs. Its very urgent.
Thanks
subba.

I donot have the complete httpd.conf with me right now but you have to follow the following steps:
1) Compile Apache with ssl module included
2) Instead of Port 80 change the port to 443 at global level or at virtual directory level
3) If u want to redirect the traffic on port 80 to port 443 then also include mod_rewrite module while compiliing apache and write a rule to redirect the traffic from port 80 to 443

Apache HTTPd + 2 Tomcats with BlazeDS

The web architecture that we have is quite simple, it is a single Apache HTTPd server that is communicating with 2 Tomcat servers using mod_jk. The configuration is made so one Tomcat is in a waiting state in case the other Tomcat server crashes (or bounce).
How can I configure BlazeDS to support this configuration? Is sharing the HTTPSession between the two Tomcats enough for BlazeDS?
I would like the simplest solution possible, I know about BlazeDS clustering possibilities with JGroups but it seems not adapted to multi-environments (DEV/QA/PROD) sites because we have to configure stuff inside the web app.
In short, do BlazeDS only need HTTPSession sharing between Tomcats or is there some other requirements?

As far as my understanding goes there should be no reason to use JGroups unless you are using messaging.
If you are storing session data on the server you will need to using Tomcat clustering other wise you shouldn't even need that.
We are using a similar setup with HTTPd and multiple JBoss servers for high availability/scalability. We are not using messaging so we didn't configure JGroups. We don't have JBoss clustering enabled because we don't have any data to replicate between the JBoss nodes.
I have run several load tests using JMeter and everything runs happily when JBoss nodes are added or removed under load.
Something to note if you are using recent builds of BlazeDS and you want to run 2 or more Tomcat servers concurrently you will need to enable Sticky Sessions with mod_jk and Tomcat other wise recent builds of BlazeDS may start throwing exceptions. This change was introduced to prevent subsequent client requests from needlessly creating new sessions. As it turns out this is a bit of an issue when doing loadbalancing unless Sticky Sessions are used.
Hope some of that information helps,
Lance

Apache (httpd) restarts automatically

After booting my mac my webserver is not running. starting apache with the command "sudo apachectl -k start" works as it should. the webserver has been started. but after the command "sudo apachectl -k stop" the following happens: (logfile)
[Fri Aug 10 18:19:42 2012] [notice] caught SIGTERM, shutting down
[Fri Aug 10 18:19:43 2012] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
[Fri Aug 10 18:19:44 2012] [notice] Digest: generating secret for digest authentication ...
[Fri Aug 10 18:19:44 2012] [notice] Digest: done
[Fri Aug 10 18:19:45 2012] [notice] Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8r DAV/2 PHP/5.3.13 with Suhosin-Patch configured -- resuming normal operations
the apache starts again, and I have access to my document root via http (127.0.0.1 or localhost and as well from other computers via my IP.
why is the apache restarting automatically???? (and by the way: how can i fix the warning in line 2?)
thx

Hi,
the event description for FMS that you gave mention about the Apache working as expected. A returned value of 0 shows the correct working of the apache httpd service.
When the apache is stopped, as you are observing, how are the streaming services stopped? They will not be stopped as they are not on http. Anyways, one quick workaround (while we investigate why the apache is stopping intermittantly) is to have an external / separate installation of apache away from FMS and use that for all your web service purposes.
How did you confirm about the stoppage ? The task manager or other process explorer shows it coming down ? Can you please check the fms logs if there is anything that is related to apache coming down, being logged?
Thank you !

Problems with libclntsh.so.10.1 and PHP/Apache HTTPD

Hello,
I've been wrestling with the install of Instant Client/OCI8 with PHP 5.0.4 and Apache HTTPD 2.0.52 on RHEL4 ES. Most recently I've followed the instructions detailed here: http://www.oracle.com/technology/pub/notes/technote_php_instant.html
Apache is installed from the RHN rpm.
PHP was successfully compiled with the following parameters:
./configure with-mysql with-ssl with-ldap with-apxs2 with-dom with-oci8-instant-client=/usr/local/oracle/instantclient_10_2 --enable-sigchild
I've also attempted to get OCI8 working using the full Administration Client from CD. In either case, I can compile/install PHP just fine. I've indexed the Instant Client directory with ldconfig, and the user that runs HTTPD has read/execute permissions on libclntsh.so.10.1 and on all the directories above it. Nonetheless, when I start Apache, I invariably run into the following error:
# /etc/init.d/httpd start
Starting httpd: Syntax error on line 190 of /etc/httpd/conf/httpd.conf:
Cannot load /usr/lib/httpd/modules/libphp5.so into server: libclntsh.so.10.1: failed to map segment from shared object: Permission denied [FAILED]
Thanks in advance for any insight,
Patrick
Message was edited by:
dog.breath

I have a similar problem:
Syntax error on line 202 of /etc/httpd/conf/httpd.conf:
Cannot load /usr/lib/httpd/modules/libphp5.so into server: libclntsh.so.10.1: cannot open shared object file: No such file or directory
Using the following succesfull configuraion
PHP Version => 5.0.4
System => Linux 2.6.9-1.667smp #1 SMP Tue Nov 2 14:59:52 EST 2004 i686
Build Date => Aug 26 2005 11:23:17
Configure Command => './configure' '--enable-force-cgi-redirect' '--enable-ftp' '--with-dbase' '--with-regex=system' '--with-gd' '--with-bz2' '--with-config-file-path=/etc/httpd/conf/httpd.conf' '--with-zlib' '--with-oci8=/home/oracle/product/10.1.0/Db_1' '--enable-sigchild' '--with-dom-xslt=/usr/lib/libxslt.so.1.1.11' '--with-png' '--with-apxs2'
Server API => Command Line Interface
Virtual Directory Support => disabled
Configuration File (php.ini) Path => /etc/httpd/conf/httpd.conf
Everything is visible to all users the LD Library path is set even in the httpd.conf file.
Clear PHP works from within the command line, now I want to get it working via Apache2.
If anybody has a clue I would be most obliged.
Also disabling SELinux did not do the trick.

Migrating to Web Server 7.0 from Apache HTTPd document

We've [made available|http://wikis.sun.com/display/WebServer/Migration+from+Apache+HTTP+Server] a work-in-progress document on our Wiki page discussing some of the common problems people have when they migrate from Apache HTTPd server to Sun Java System Web Server 7.0.
We'd love to get your feedback. What are we missing? Have some information you'd like to add? The comments section is open to all feedback.
Thanks!

can this be made as a topic rather than a post in the forum ?

Apache httpd version on waas

How can I determine the Apache HTTPD version running on the WAAS/WAE?

Did you ever get a solution for this?? If so, can you please post it here?
Thanks in advance

Multi-processor support for apache/httpd?

Hello all,
I'm wondering there's a way to get apache/httpd to take advantage of all 8 cores of my Mac Pro? I have a process running that is maxing out at 100% CPU and I would love to see the other 7 processors being utilized. Is this possible? Any help would be much appreciated.

Apache is usually configured to run multiple worker processes, so yes, it can use all of an eight-core.
Launch Terminal.app and issue the following command, authenticating with an administrative password:
$ sudo lsof -i -P | grep -i "httpd"
That's a list of all the web server processes active.
Now if your central web activities are all within that one process that is using all of that core, then you do have a problem. Figuring out how to split the processing from that process across more cores depends on exactly what that particular process is doing.

How to start my Apache httpd server on TREX, post installation

Dear Gurus,
I have successfully installed TREX 7.0 SR3 on my Suse Linux 10 SP2 system and i have choosen it for ABAP and HTTP services, i have done all the post-install activities according to the standard document from SAP.
All seems to be fine so far, and below are the services that are running on my TREX server..
======================================================================================================
trexdev:/usr/sap/TRX/TRX00/trexdev/Apache # ps -fu trxadm
UID        PID PPID C STIME TTY          TIME CMD
trxadm    6039     1 0 Oct30 ?        00:01:21 /usr/sap/TRX/SYS/exe/run/saposcol
trxadm    6055     1 0 Oct30 ?        00:00:00 /usr/sap/TRX/TRX00/exe/sapstartsrv pf=/usr/sap/TRX/SYS/profile/START_TRX00_trexdev -D
trxadm   21304     1 0 Oct31 ?        00:00:00 sapstart pf=/usr/sap/TRX/SYS/profile/START_TRX00_trexdev
trxadm   21316 21304 0 Oct31 ?        00:00:00 trx.sapTRX_TRX00 -d -f /usr/sap/TRX/TRX00/trexdev/TREXDaemon.ini pf=/usr/sap/TRX/SYS/profile/TRX_TRX00_trexde
trxadm   21319 21304 0 Oct31 ?        00:00:06 /usr/sap/TRX/TRX00/exe/sapccmsr pf=/usr/sap/TRX/SYS/profile/TRX_TRX00_trexdev -j2ee -standalone -nodaemon -DC
trxadm   21321 21316 0 Oct31 ?        00:00:22 TREXNameServer.x
trxadm   21341 21316 0 Oct31 ?        00:00:01 TREXPreprocessor.x -port 30002
trxadm   21345 21316 0 Oct31 ?        00:00:07 TREXIndexServer.x -port 30003
trxadm   21352 21316 0 Oct31 ?        00:00:03 TREXQueueServer.x -port 30004
trxadm   21367 21316 0 Oct31 ?        00:01:58 python alertserver.py
trxadm   24710 21316 0 Oct31 ?        00:00:26 TREXRfcServer2.x
======================================================================================================
I have no problems on my server as to what so ever, but the only thing is that I want to know how to start my apache httpd server so that i can starting using my Web services from Portal.
According to SAP standard document it clearly says that Apache is installed by SAPinst tool, but i also verified that the http://localhost does not give any web page opened, probably no http service is running on my machine.
I request all gurus to help me on this and start my httpd service.
Thanks in advance
Regards
BasoKing

Did you ever get a solution for this?? If so, can you please post it here?
Thanks in advance

File request: org.apache.httpd.plist

Can some one post me their 10.5 copy of org.apache.httpd.plist as I've managed to remove this somehow.
Thanks.

Welcome to Apple Discussions, Neil.
I found this on Apple Mailing Lists
http://lists.apple.com/archives/macos-x-server/2008/Jan/msg00373.html
and a possible solution:
Maybe it's empty?
+"Try going into your server admin "Certificates" section and removing and regenerating the certificate. Could also be permissions."+
And...
http://lists.apple.com/archives/macos-x-server/2008/Jan/msg00386.html
and a resolution, ta-ta!
http://lists.apple.com/archives/macos-x-server/2008/Jan/msg00387.html
+"The problem seems to have come from my renaming the default key provided with OSX Server. For some reason, when I rebooted this past time it broke apache, even though none of the sites had SSL enabled. Fixing the default .conf files so that they referred to the new key name (and those for the four sites on Apache) fixed the problem."+
Of course, who knows if yours is the same issue?
-mj

Apache httpd.conf file pointing to Portal

How do I define a virtual host in an Apache httpd.conf file that points to a portal page?

Hi,
If you want to use name-based virtual hosts you need to define at
least one IP address (and port number) for them.
Here is a sample from the httpd.conf file
#NameVirtualHost 12.34.56.78:80
#NameVirtualHost 12.34.56.78
NameVirtualHost 130.35.92.126
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
#<VirtualHost ip.address.of.host.some_domain.com>
# ServerAdmin [email protected]_domain.com
# DocumentRoot /www/docs/host.some_domain.com
# ServerName host.some_domain.com
# ErrorLog logs/host.some_domain.com-error_log
# CustomLog logs/host.some_domain.com-access_log common
#</VirtualHost>
<VirtualHost <130.35.92.126>
DocumentRoot /webdb/apache80_1/Apache/Apache/htdocs
ServerName domain1.com
ServerAlias domain1
#ErrorLog /webdb/apache80_1/Apache/Apache/logs/httpds_error_log
#CustomLog logs/host.some_domain.com-access_log common
</VirtualHost>
You can copy the above lines and change the domain1 and the ip address to the name of your domain and the ip address of your machine.
Thanks,
Sharmila

Integrating jboss and apache httpd webserver

Hi folks,
I am a new comer in J2EE realm. Prior to this, I have been using Tomcat and Apache httpd and serves me very nicely.
However, I am now required to evaluate the possibilities of using JBoss. Since we are in need of Apache httpd webserver (we are still serving some old cgi-based), how can we integrate JBOSS and Apache? This is to say that when the request is for J2EE, how can we let Apache forwards this request to JBoss for processing? is this possible though?
I really appreciate you helping me.
Thanks in bundle before hand.
Regards,

try this http://www.pubbitch.org/jboss/

MBP stuck to the spinning wheel, won't boot after deleting something from "/System/Library/LaunchDaemons/org.apache.httpd.plist"

Hi all,
I have a MBP 13" (early 2011) running Lion 10.7.2 and some days before, I wanted to host an HTTP server on it. I googled and found I should turn on "Web Sharing" for this feature. But unfortunately, it just wouldn't start. I googled again and found a solution (I think). I tried deleting the disable key and
<string>-D</string>
<string>WEBSHARING_ON</string>
from "/System/Library/LaunchDaemons/org.apache.httpd.plist". I couldn't save the file because it is protected. So I tried copying all the content of the file and save it to a new file with the same name, deleted the original file, and put the new one back to the directory. Nothing worked. I couldn't edit the new file as well. So I put the original file back and replaced the new one. Then I tried to change my rights of that directory as well as the file to "Read and Write". And I managed to edit the file! I deleted the mentioned sentences and saved it. Then I tried turning Web Sharing on for about a hundred times, but never succeeded. So I turned off my MBP and slept. OK, the next day when I decided to try again, I found the machine won't boot! It got stuck to the grey screen with Apple logo and a spinning wheel permanently. Every time I needed to hold the power button for 4 seconds to turn it off. I've tried SUM (command-S) and ran fsck, no problems were found. I also tried the method from http://support.apple.com/kb/TA20809 , but still couldn't get past that grey screen. Cannot boot into safe Boot also. I don't if it is a problem related to the alias of that file because I had deleted it and put it back. Please help. Many thanks.
P.S. If can't solve it, should I bring it to Apple Store and ask for Genius?

Hi,
Yes, I did resolve it - it was the graphics card. Changed that, updated OS X and it was done.
I can't now remember exactly which card I used, and I'm away at the moment so I can't get to the infomation, but I do remember that it was a full length card with a large heatsink, and was a bit of a pig to squeeze into the chassis!
Had to buy an adaptor for the second monitor connection, but that didn't cause any hassle. I got the card and cable from the local Apple Store.
It also theoretically needed a later version of OS X than was already there, but since it allowed me to boot off the CD, that didn't matter (and it worked with the old one anyway, as it turned out).
Oh, and also of course, although it's a bog standard PC card, you have to pay way over the odds for it because it has to have different PROMS for a Mac. (Thank you Apple.) Just part of the price we all have to pay for using Macs.
I seem to remember that there was a certain amount of dancing involved in upgrading the OS afterwards (might have had to do one step twice), but nothing that unusual.
Hope this helps,
All the best,
Brian

Is it possible to front-end a SJSAS8.2 instance with Apache httpd

I know glassfish can be run with Apache httpd by mod_jk.
But how to make SJSAS8.2 run with Apache like glassfish.

Yes it is possible.
Locate the LLB:
LV folder\vi.lib\daq\dqchnutl.llb
There you find useful vis to handle virtual channel.
The Get DAQ ChannelNames.vi return also the channel units

Need help regarding Apache httpd.conf and PHP setup.

Hi,
I am facing problem setting up my PHP and apache setup. I have installed Apache2.2 Root path = C:\Program Files\Apache Software Foundation\Apache2.2
I have also installed PHP in my C:\PHP drive earlier. I moved this PHP folder to C:\Program Files\Apache Software Foundation\Apache2.2 just to keep all things at one place.
I have copied php5ts.dll at 4 locations - C:\Program Files\Apache Group\Apache2 \bin , %SYSTEMROOT%\System32, %SYSTEMROOT%\system and %SYSTEMROOT%. I have also added these paths in Environment variable 'PATH'.
In httpd.conf file entries are as follows:
ServerRoot "C:/Program Files/Apache Software Foundation/Apache2.2"
I have added these 3 lines as
LoadModule php5_module php/php5apache2.dll
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
When restarting apache http server I get message as:
httpd.exe error ...... cannot load C:\Program Files\Apache Software Foundation\Apache2.2\php\php5ts.dll into the server. The specified module could not be found.
I have checked that php5ts.dll DLL exist at above path. Please help me out urgently.

Sorry I don't have Windows available to check the paths. With recent versions
of PHP I never copied files out of the php source directory.
Make sure the Oracle 10g Instant Client is in your PATH environment variable.
You could try using the PHP Windows MSI installer.
cj

Apache httpd 2.x.x 2.2.12 vulnerabilities

Similar Messages

Maybe you are looking for