What are the major vulnerabilities of Redhat + Apache?

Question

I am searching for a host for a new commercial website. Among other things, I'd like to know what the various OS - Webserver combinations have in terms of vulnerabilities. What are the vulnerabilities of Redhat + Apache?

Answer 1

See: http://httpd.apache.org/security/vulnerabilities_20.html

Answer 2

Its kind of a difficult question to answer, the development life cycles are so active you're asking for something that's likely to have been solved already ( and if its been reported so that we know of it, the likelihood its fixed is really high )

What you need is a 0-day hack for them, and asking this list really wont get you those.

Answer 3

Poor system admins is the biggest in my experience.

Answer 4

Any system is only as strong as its weakest link. Invariably that will not be the OS or the server software, it will be the end application you develop or install.

Answer 5

As suggested here, I could check out the CERT Database.

Answer 6

The biggest risk to any web application server is vulnerabilities in the web application its self. Linux Apache MySQL and PHP (LAMP) is a very secure platform. RedHat's Fedora core is very secure because it uses SELinux, this is somthing that does not exist for Windows. However vulnerabilities such as SQL Injection and XSS can still result in your server getting hacked.