Lucene search

K
nessusTenable8938.PRM
HistoryFeb 27, 2015 - 12:00 a.m.

Apache HTTP Server 2.4.10 FastCGI DoS

2015-02-2700:00:00
Tenable
www.tenable.com
32

The version of Apache HTTP Server 2.4 installed on the remote host is 2.4.10 and is, therefore, affected by a denial of service. Specifically, the ‘mod_proxy_fcgi’ module allows a remote FastCGI server to cause a buffer overflow and crash the HTTP daemon. This is caused by a flaw in the way that Apache HTTP Server handles long response headers. An attacker, exploiting this flaw, would be able to cause a denial of service on the Apache HTTP Server.

Binary data 8938.prm
VendorProductVersionCPE
apachehttp_servercpe:/a:apache:http_server