WebSphere 7.05 APR-util xml-apr_xml.c 导致拒绝服务攻击漏洞

No description provided by source...

CVE-2009-1955: Improper Restriction of Recursive Entity References in DTDs

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...