PT-2010-2183 · Apache+2 · Apache Http Server+2

Niku Toivola · Publicado 2010-03-02 · Atualizado 2024-06-15 · CVE-2010-0408

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.x through 2.2.14

Description The issue allows remote attackers to cause a denial of service, resulting in a backend server outage. This occurs when a client sends a crafted request with no request body, causing the server to return a wrong status code. A remote attacker could exploit this by sending malicious requests, putting the backend server into an error state until the retry timeout expires.

Recommendations For Apache HTTP Server versions 2.2.x through 2.2.14, update to version 2.2.15 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-0408

DSA-2035-1

HPSBUX02531

OPENSUSE-SU-2024:10268-1

RHSA-2010:0168

RHSA-2010:0396

RHSA-2010_0168

Produtos afetados

Apache Http Server

Hp-Ux

Red Hat

Referências · 110

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094 · Nota de Segurança
• http://secunia.com/advisories/39628 · Nota
• https://suse.com/security/cve/CVE-2009-3095 · Nota
• https://suse.com/security/cve/CVE-2014-3583 · Nota
• https://suse.com/security/cve/CVE-2014-0118 · Nota
• https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9935 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0408 · Nota de Segurança
• https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E · Nota
• http://support.apple.com/kb/HT4435 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2010-0408 · Aviso do Fabricante