Apache Web Server Linefeed Memory Allocation Denial Of Service Vulnerability

Bugtraq ID:	7254
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2003-0132
Remote:	Yes
Local:	No
Published:	Apr 02 2003 12:00AM
Updated:	May 01 2009 12:36AM
Credit:	This vulnerability was initially reported by the vendor.
Vulnerable:	HP HP-UX Apache-Based Web Server 1.0.1 .01 - HP HP-UX 11.22 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 HP HP-UX Apache-Based Web Server 1.0 .02.01 HP HP-UX Apache-Based Web Server 1.0 .01 - HP HP-UX 11.22 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 HP Apache-Based Web Server 2.0.43 .04 HP Apache-Based Web Server 2.0.43 .00 - HP HP-UX 11.22 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 Computer Associates BrightStor ARCServe Backup for HP 11.1 Computer Associates ARCServe Backup for Tru64 11.5 Computer Associates ARCServe Backup for Solaris 11.5 Computer Associates ARCServe Backup for AIX 11.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apache Apache 2.0.44 Apache Apache 2.0.43 Apache Apache 2.0.42 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.2 Apache Apache 2.0.41 Apache Apache 2.0.40 + Redhat Linux 9.0 i386 + Redhat Linux 8.0 + Terra Soft Solutions Yellow Dog Linux 3.0 Apache Apache 2.0.39 Apache Apache 2.0.38 Apache Apache 2.0.37 Apache Apache 2.0.36 Apache Apache 2.0.35 Apache Apache 2.0.32 Apache Apache 2.0.28 Apache Apache 2.0 a9 Apache Apache 2.0
Not Vulnerable:	HP HP-UX Apache-Based Web Server 1.0 .03.01 Apple Mac OS X Server 10.2.5 Apache Apache 2.0.45 - Apple Mac OS X 10.2.6 - Apple Mac OS X 10.2.5 - Apple Mac OS X 10.2.4 - Apple Mac OS X 10.2.3 - Apple Mac OS X 10.2.2 - Apple Mac OS X 10.2.1 - Apple Mac OS X 10.2 - Apple Mac OS X 10.1.5 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0

Apache Web Server Linefeed Memory Allocation Denial Of Service Vulnerability

Apache 2.0 series webservers are prone to a denial-of-service condition. This issue occurs because of the way that Apache handles excessive amounts of consecutive linefeed characters. The server may allocate large amounts of memory, resulting in a denial of service.