Lucene search

K
kasperskyKaspersky LabKLA10065
HistoryJul 22, 2013 - 12:00 a.m.

KLA10065 Multiple vulnerabilities in Apache httpd

2013-07-2200:00:00
Kaspersky Lab
threats.kaspersky.com
106

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.973 High

EPSS

Percentile

99.9%

Detect date:

07/22/2013

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Apache httpd. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, obtain sensitive information or bypass security restrictions. Below is a complete list of vulnerabilities

Affected products:

Apache httpd 2.0 versions 2.0.64 and earlier

Solution:

Update to latest version

Original advisories:

Apache changelog

Impacts:

ACE

Related products:

Apache HTTP Server

CVE-IDS:

CVE-2011-31927.8Critical
CVE-2013-18625.1High
CVE-2012-00314.6Warning
CVE-2011-04194.3Warning
CVE-2011-36074.4Warning
CVE-2011-33685.0Critical
CVE-2012-00534.3Warning

Exploitation:

The following public exploits exists for this vulnerability:

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.973 High

EPSS

Percentile

99.9%