Apache 2 mod_dav Denial Of Service Vulnerability
BID:5816
Info
Apache 2 mod_dav Denial Of Service Vulnerability
| Bugtraq ID: | 5816 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2002 12:00AM |
| Updated: | Sep 25 2002 12:00AM |
| Credit: | The discoverer of this vulnerability is currently unknown. |
| Vulnerable: |
Apache Apache 2.0.41 Apache Apache 2.0.40 Apache Apache 2.0.39 Apache Apache 2.0.38 Apache Apache 2.0.37 Apache Apache 2.0.36 Apache Apache 2.0.35 Apache Apache 2.0.32 Apache Apache 2.0.28 Apache Apache 2.0 |
| Not Vulnerable: |
Apache Apache 2.0.42 |
Discussion
Apache 2 mod_dav Denial Of Service Vulnerability
A vulnerablity has been discovered in the mod_dav component of Apache web server.
It has been reported that, under certain Apache configurations, it may be possible for an attacker to issue a malicious HTTP request which will result in a denial of service.
A vulnerablity has been discovered in the mod_dav component of Apache web server.
It has been reported that, under certain Apache configurations, it may be possible for an attacker to issue a malicious HTTP request which will result in a denial of service.
Exploit / POC
Apache 2 mod_dav Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Apache 2 mod_dav Denial Of Service Vulnerability
Solution:
The vendor has addressed this issue in version v2.0.42:
Apache Apache 2.0
Apache Apache 2.0.28
Apache Apache 2.0.32
Apache Apache 2.0.35
Apache Apache 2.0.36
Apache Apache 2.0.37
Apache Apache 2.0.38
Apache Apache 2.0.39
Apache Apache 2.0.40
Apache Apache 2.0.41
Solution:
The vendor has addressed this issue in version v2.0.42:
Apache Apache 2.0
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.28
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.32
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.35
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.36
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.37
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.38
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.39
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.40
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
Apache Apache 2.0.41
-
Apache Software Foundation Apache httpd 2.0.42
http://www.apache.org/dist/httpd/
References
Apache 2 mod_dav Denial Of Service Vulnerability
References:
References: