Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : apache2 vulnerabilities (USN-802-1)

It was discovered that modproxyhttp did not properly handle a large amount of streamed data when used as a reverse proxy. A remote attacker could exploit this and cause a denial of service via memory resource consumption. This issue affected Ubuntu 8.04 LTS, 8.10 and 9.04. CVE-2009-1890 It was...

USN-802-1: Apache vulnerabilities

It was discovered that modproxyhttp did not properly handle a large amount of streamed data when used as a reverse proxy. A remote attacker could exploit this and cause a denial of service via memory resource consumption. This issue affected Ubuntu 8.04 LTS, 8.10 and 9.04. CVE-2009-1890 It was...

Apache 'mod_deflate'远程拒绝服务漏洞

Bugraq ID: 35623 CVE ID：CVE-2009-1891 Apache是一款流行HTTP服务程序。 Apache moddeflat模块不正确处理特殊请求，远程攻击者可以利用漏洞使服务程序崩溃。 当moddeflate启用时下载一个文件，在结束之前中止连接，会使CPU压缩文件达到100%利用率。 即使一个不太大的文件几MB，通过在这个文件中提交同步请求并马上中止连接，由于这个文件在平行过程中多次压缩，可导致消耗大量CPU时间而造成拒绝服务攻击。 Apache Software Foundation Apache 2.2.11 Apache Software...

GLSA-200907-04 : Apache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200907-04 Apache: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Apache HTTP server: Jonathan Peatfield reported that the 'Options=IncludesNoEXEC' argument to the 'AllowOverride' directive is not...

Code injection

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

EUVD-2009-1886

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

CVE-2009-1891

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

CVE-2009-1891

CVE-2009-1891 affects the Apache HTTP Server mod_deflate in 2.2.x (notably 2.2.11 and earlier). The issue causes CPU consumption DoS by compressing large files even after the client connection closes. Public advisories across distributions confirm the flaw and its remediation via updated packages...

CVE-2009-1891

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

Mandriva Linux Security Advisory : apache (MDVSA-2009:149)

Multiple vulnerabilities has been found and corrected in apache : The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length...

RHEL 5 : httpd (RHSA-2009:1148)

Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the...

Apache DoS

Data exceeding Content-length value causes CPU exhaustion. moddeflate doesn't break file compress operation if client disconnects...

Apache Httpd < 2.0.64 : mod_deflate DoS

A denial of service flaw was found in the moddeflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause moddeflate to consume large amounts of CPU...

Apache Httpd < 2.2.12 : mod_deflate DoS

A denial of service flaw was found in the moddeflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause moddeflate to consume large amounts of CPU...