PT-2003-1313 · Apache · Apache Http Server
Publicado
2003-01-20
·
Atualizado
2021-06-06
·
CVE-2003-0016
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Apache versions prior to 2.0.44
Description
The issue allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names, due to incorrect filtering of these names on Windows platforms.
Recommendations
For Apache versions prior to 2.0.44, update to version 2.0.44 or later to resolve the issue. As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Http Server