Apache < 2.2.14 Multiple Vulnerabilities

According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.14. Such versions are potentially affected by multiple vulnerabilities :

• Faulty error handling in the Solaris pollset support (Event Port backend) which could trigger hangs in the prefork and event MPMs on that platform (CVE-2009-2699)

• The ‘ap_proxy_ftp_handler’ function in 'modules/proxy/proxy_ftp.c in the ‘mod_proxy_ftp’ module allows remote FTP servers to cause a denial-of-service via a malformed reply to an EPSV command. (CVE-2009-3094)

• The ‘mod_proxy_ftp’ module allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server. (CVE-2009-3095)