Apache < 2.2.12 Multiple Vulnerabilities

According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.12. Such versions may be affected by several issues :

• A denial-of-service vulnerability in the ‘mod_proxy’ module could be exploited to cause the process to consume large amounts of CPU resources. (CVE-2009-1890)

• The ‘mod_deflate’ module is prone to a remote denial-of-service vulnerability when large file downloads are terminated before completing. (CVE-2009-1891)

NNM cannot determine whether the affected modules are in use.