Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
BID:38491
Info
Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
| Bugtraq ID: | 38491 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0408 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 02 2010 12:00AM |
| Updated: | Apr 13 2015 09:55PM |
| Credit: | Niku Toivola |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris Build Snv 111B Sun OpenSolaris 0 Slackware Linux x86_64 -current Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 rPath rPath Linux 2 rPath Appliance Platform Linux Service 2 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat JBoss Enterprise Web Server for RHEL 5 Server 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 ES 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 AS 1.0 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Oracle Oracle HTTP Server 9.2 .8 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle HTTP Server 9.1 Oracle Oracle HTTP Server 9.0.3 .1 Oracle Oracle HTTP Server 9.0.2 .3 Oracle Oracle HTTP Server 9.0.2 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 8.1.7 Oracle Oracle HTTP Server 1.0.2 .2 Roll up 2 Oracle Oracle HTTP Server 1.0.2 .2 Oracle Oracle HTTP Server 1.0.2 .1 Oracle Oracle HTTP Server 1.0.2 .0 Oracle Oracle HTTP Server 11.1.1.5 Oracle Oracle HTTP Server 11.1.1.4 Oracle Oracle HTTP Server 11.1.1.3 Oracle Oracle HTTP Server 10.1.3.5 Oracle Oracle HTTP Server 10.1.2.3 Oracle HTTP Server for Server 9.2 Oracle HTTP Server for Server 9.0.1 Oracle HTTP Server for Server 8.1.7 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.2.3 Kolab Kolab Groupware Server 2.2.2 Kolab Kolab Groupware Server 2.2 Kolab Kolab Groupware Server 2.2-rc3 Kolab Kolab Groupware Server 2.2-rc1 Kolab Kolab Groupware Server 2.2 beta3 Kolab Kolab Groupware Server 2.2 beta1 Kolab Kolab Groupware Server 2.2 -rc2 Kolab Kolab Groupware Server 2.1beta2 IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 7.0 .9 IBM Websphere Application Server 7.0 .8 IBM Websphere Application Server 6.1.2 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .39 IBM Websphere Application Server 6.0.2 .35 IBM Websphere Application Server 6.0.2 .33 IBM Websphere Application Server 6.0.2 .31 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .29 IBM Websphere Application Server 6.0.2 .27 IBM Websphere Application Server 6.0.2 .25 IBM Websphere Application Server 6.0.2 .24 IBM Websphere Application Server 6.0.2 .23 IBM Websphere Application Server 6.0.2 .22 IBM Websphere Application Server 6.0.2 .21 IBM Websphere Application Server 6.0.2 .17 IBM Websphere Application Server 6.0.2 .15 IBM Websphere Application Server 6.0.2 .13 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0.1 IBM Websphere Application Server 6.0 .7 IBM Websphere Application Server 6.0 IBM Websphere Application Server 7.0.0.7 IBM Websphere Application Server 7.0.0.5 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.2 IBM Websphere Application Server 6.1.0.29 IBM Websphere Application Server 6.1.0.27 IBM Websphere Application Server 6.0.2.19 IBM Websphere Application Server 6.0.2 Fix Pack 17 IBM HTTP Server 6.1 .27 IBM HTTP Server 6.1 .25 IBM HTTP Server 6.1 .19 IBM HTTP Server 6.1 .17 IBM HTTP Server 6.1 .15 IBM HTTP Server 6.0.2 .35 IBM HTTP Server 6.0.2 .33 IBM HTTP Server 6.0.2 .27 IBM HTTP Server 6.0.2 .13 IBM HTTP Server 6.0.2 IBM HTTP Server 7.0.0.5 IBM HTTP Server 7.0 IBM HTTP Server 6.2 IBM HTTP Server 6.1.0.13 IBM HTTP Server 6.1.0.1 IBM HTTP Server 6.1.0 IBM HTTP Server 6.0.2.23 IBM HTTP Server 6.0.2.19 IBM HTTP Server 6.0.2.12 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Voice Portal 5.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Application Enablement Services 5.2 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6 Apache Software Foundation mod_proxy_ajp 2.2.14 Apache Software Foundation mod_proxy_ajp 2.2.11 Apache Software Foundation mod_proxy_ajp 2.2.10 Apache Software Foundation mod_proxy_ajp 2.2.9 Apache Software Foundation mod_proxy_ajp 2.2.6 Apache Software Foundation mod_proxy_ajp 2.2.3 Apache Software Foundation Apache 2.2.14 Apache Software Foundation Apache 2.2.13 Apache Software Foundation Apache 2.2.12 Apache Software Foundation Apache 2.2.11 Apache Software Foundation Apache 2.2.10 Apache Software Foundation Apache 2.2.9 Apache Software Foundation Apache 2.2.8 Apache Software Foundation Apache 2.2.6 Apache Software Foundation Apache 2.2.5 Apache Software Foundation Apache 2.2.4 Apache Software Foundation Apache 2.2.3 Apache Software Foundation Apache 2.2.2 Apache Software Foundation Apache 2.2 Apache Software Foundation Apache 2.2.7-dev Apache Software Foundation Apache 2.2.6-dev Apache Software Foundation Apache 2.2.5-dev Apache Software Foundation Apache 2.2.1 Apache Software Foundation Apache 2.2 |
| Not Vulnerable: |
Kolab Kolab Groupware Server 2.2.4 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1.0.31 IBM Websphere Application Server 6.0.2.41 IBM HTTP Server 7.0 .11 IBM HTTP Server 6.1 .31 IBM HTTP Server 6.0.2 .41 Apple Mac OS X Server 10.6.5 Apache Software Foundation Apache 2.2.15 |
Discussion
Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
The Apache 'mod_proxy_ajp' module is prone to a denial-of-service vulnerability.
Successful exploits may allow remote attackers to cause denial-of-service conditions.
The Apache 'mod_proxy_ajp' module is prone to a denial-of-service vulnerability.
Successful exploits may allow remote attackers to cause denial-of-service conditions.
Exploit / POC
Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
Debian Linux 5.0 alpha
Debian Linux 5.0 armel
Kolab Kolab Groupware Server 2.2 beta3
Debian Linux 5.0 hppa
Debian Linux 5.0 m68k
Kolab Kolab Groupware Server 2.2 beta1
Kolab Kolab Groupware Server 2.2 -rc2
Apple Mac OS X Server 10.6
Kolab Kolab Groupware Server 2.2
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
-
Slackware httpd-2.2.15-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ httpd-2.2.15-i486-1_slack12.2.tgz
Debian Linux 5.0 alpha
-
Debian apache2-dbg_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-dbg_2.2 .9-10+lenny7_alpha.deb -
Debian apache2-doc_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-doc_2.2 .9-10+lenny7_all.deb -
Debian apache2-mpm-event_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-eve nt_2.2.9-10+lenny7_alpha.deb -
Debian apache2-mpm-itk_2.2.6-02-1+lenny2+b4_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2-mpm-itk/apache2 -mpm-itk_2.2.6-02-1+lenny2+b4_alpha.deb -
Debian apache2-mpm-prefork_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-pre fork_2.2.9-10+lenny7_alpha.deb -
Debian apache2-mpm-worker_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-wor ker_2.2.9-10+lenny7_alpha.deb -
Debian apache2-prefork-dev_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-prefork -dev_2.2.9-10+lenny7_alpha.deb -
Debian apache2-src_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-src_2.2 .9-10+lenny7_all.deb -
Debian apache2-suexec-custom_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec- custom_2.2.9-10+lenny7_alpha.deb -
Debian apache2-suexec_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec_ 2.2.9-10+lenny7_alpha.deb -
Debian apache2-threaded-dev_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-threade d-dev_2.2.9-10+lenny7_alpha.deb -
Debian apache2-utils_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-utils_2 .2.9-10+lenny7_alpha.deb -
Debian apache2.2-common_2.2.9-10+lenny7_alpha.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2.2-commo n_2.2.9-10+lenny7_alpha.deb -
Debian apache2_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2_2.2.9-1 0+lenny7_all.deb
Debian Linux 5.0 armel
-
Debian apache2-dbg_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-dbg_2.2 .9-10+lenny7_armel.deb -
Debian apache2-doc_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-doc_2.2 .9-10+lenny7_all.deb -
Debian apache2-mpm-event_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-eve nt_2.2.9-10+lenny7_armel.deb -
Debian apache2-mpm-itk_2.2.6-02-1+lenny2+b3_armel.deb
http://security.debian.org/pool/updates/main/a/apache2-mpm-itk/apache2 -mpm-itk_2.2.6-02-1+lenny2+b3_armel.deb -
Debian apache2-mpm-prefork_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-pre fork_2.2.9-10+lenny7_armel.deb -
Debian apache2-mpm-worker_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-wor ker_2.2.9-10+lenny7_armel.deb -
Debian apache2-prefork-dev_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-prefork -dev_2.2.9-10+lenny7_armel.deb -
Debian apache2-src_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-src_2.2 .9-10+lenny7_all.deb -
Debian apache2-suexec-custom_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec- custom_2.2.9-10+lenny7_armel.deb -
Debian apache2-suexec_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec_ 2.2.9-10+lenny7_armel.deb -
Debian apache2-threaded-dev_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-threade d-dev_2.2.9-10+lenny7_armel.deb -
Debian apache2-utils_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-utils_2 .2.9-10+lenny7_armel.deb -
Debian apache2.2-common_2.2.9-10+lenny7_armel.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2.2-commo n_2.2.9-10+lenny7_armel.deb -
Debian apache2_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2_2.2.9-1 0+lenny7_all.deb
Kolab Kolab Groupware Server 2.2 beta3
-
Kolab kolab-server-2.2.4
http://files.kolab.org/server/release/kolab-server-2.2.4/
Debian Linux 5.0 hppa
-
Debian apache2-dbg_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-dbg_2.2 .9-10+lenny7_hppa.deb -
Debian apache2-doc_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-doc_2.2 .9-10+lenny7_all.deb -
Debian apache2-mpm-event_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-eve nt_2.2.9-10+lenny7_hppa.deb -
Debian apache2-mpm-itk_2.2.6-02-1+lenny2+b3_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2-mpm-itk/apache2 -mpm-itk_2.2.6-02-1+lenny2+b3_hppa.deb -
Debian apache2-mpm-prefork_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-pre fork_2.2.9-10+lenny7_hppa.deb -
Debian apache2-mpm-worker_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-mpm-wor ker_2.2.9-10+lenny7_hppa.deb -
Debian apache2-prefork-dev_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-prefork -dev_2.2.9-10+lenny7_hppa.deb -
Debian apache2-src_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-src_2.2 .9-10+lenny7_all.deb -
Debian apache2-suexec-custom_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec- custom_2.2.9-10+lenny7_hppa.deb -
Debian apache2-suexec_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-suexec_ 2.2.9-10+lenny7_hppa.deb -
Debian apache2-threaded-dev_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-threade d-dev_2.2.9-10+lenny7_hppa.deb -
Debian apache2-utils_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-utils_2 .2.9-10+lenny7_hppa.deb -
Debian apache2.2-common_2.2.9-10+lenny7_hppa.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2.2-commo n_2.2.9-10+lenny7_hppa.deb -
Debian apache2_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2_2.2.9-1 0+lenny7_all.deb
Debian Linux 5.0 m68k
-
Debian apache2-doc_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-doc_2.2 .9-10+lenny7_all.deb -
Debian apache2-src_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2-src_2.2 .9-10+lenny7_all.deb -
Debian apache2_2.2.9-10+lenny7_all.deb
http://security.debian.org/pool/updates/main/a/apache2/apache2_2.2.9-1 0+lenny7_all.deb
Kolab Kolab Groupware Server 2.2 beta1
-
Kolab kolab-server-2.2.4
http://files.kolab.org/server/release/kolab-server-2.2.4/
Kolab Kolab Groupware Server 2.2 -rc2
-
Kolab kolab-server-2.2.4
http://files.kolab.org/server/release/kolab-server-2.2.4/
Apple Mac OS X Server 10.6
-
Apple MacOSXServUpdCombo10.6.5.dmg
For Mac OS X Server v10.6 - v10.6.3
http://www.apple.com/support/downloads/
Kolab Kolab Groupware Server 2.2
-
Kolab kolab-server-2.2.4
http://files.kolab.org/server/release/kolab-server-2.2.4/
References
Apache mod_proxy_ajp Module Incoming Request Body Denial Of Service Vulnerability
References:
References:
- Apache Homepage (Apache Software Foundation)
- Apache Module mod_proxy_ajp (Apache)
- IBM PM08939: CVE-2010-0434 / CVE-2010-0408 (IBM)
- Kolab Server 2.2.4 Final Release (Kolab)
- Multiple Vulnerabilities in the Apache 2 HTTP Server Prior to 2.2.16 (chandan)
- Multiple Vulnerabilities in the Apache 2 HTTP Server Prior to 2.2.16 (Oracle)
- PM08939: CVE-2010-0434 / CVE-2010-0408 (IBM)
- PM12247: SHIP APAR FIXES FOR H28W610 FIX PACK 6.1.0 (IBM)
- PM15829: SHIP APAR FIXES FOR H28W700 FIX PACK 7.0.0.11. (IBM)
- Revision 917876 (Apache Software Foundation)
- ASA-2010-110 httpd security and enhancement update (RHSA-2010-0168) (Avaya)
- Oracle Critical Patch Update Advisory - April 2013 (Oracle)