Lucene search
RootSSV:12628HistoryNov 13, 2009 - 12:00 a.m.
Apache mod_proxy_ftp模块空指针引用拒绝服务漏洞
2009-11-1300:00:00
Root
www.seebug.org
199
0.002 Low
EPSS
Percentile
51.2%
BUGTRAQ ID: 36260
CVE ID: CVE-2009-3094
Apache HTTP Server是一款流行的Web服务器。
Apache的mod_proxy_ftp模块中modules/proxy/proxy_ftp.c文件的ap_proxy_ftp_handler函数中存在空指针引用漏洞，正在被代理的恶意FTP服务器可以通过发送特制的EPSV或PASV命令回复导致httpd子进程崩溃，造成有限的拒绝服务。
Apache Group Apache 2.2.x
厂商补丁：
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.apache.org/dist/httpd/httpd-2.2.14.tar.gz
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2009:1579-02）以及相应补丁:
RHSA-2009:1579-02：Moderate: httpd security update
链接：https://www.redhat.com/support/errata/RHSA-2009-1579.html
Related
httpd
httpd
Apache Httpd < 2.0.64 : mod_proxy_ftp DoS
2009-09-04 00:00:00
Apache Httpd < 2.2.14 : mod_proxy_ftp DoS
2009-09-04 00:00:00
f5
f5
SOL22234807 - Apache vulnerability CVE-2009-3094
2015-12-23 00:00:00
K22234807 : Apache vulnerability CVE-2009-3094
2015-12-23 00:00:00
debiancve
debiancve
CVE-2009-3094
2009-09-08 18:30:00
prion
prion
Null pointer dereference
2009-09-08 18:30:00
openvas
openvas
Apache 'mod_proxy_ftp' Module Denial Of Service Vulnerability (Linux)
2009-09-16 00:00:00
Apache 'mod_proxy_ftp' Module Denial Of Service Vulnerability (Linux)
2009-09-16 00:00:00
Slackware Advisory SSA:2010-024-01 httpd
2012-09-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:55
ubuntucve
ubuntucve
CVE-2009-3094
2009-09-08 00:00:00
cve
cve
CVE-2009-3094
2009-09-08 18:30:00
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : httpd (SSA:2010-024-01)
2010-01-25 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2009:240)
2009-09-23 00:00:00
Fedora 11 : httpd-2.2.14-1.fc11 (2009-12747)
2010-07-01 00:00:00
securityvulns
securityvulns
Apache mod_proxy_ftp multiple security vulnerabilities
2010-03-31 00:00:00
[ MDVSA-2009:240 ] apache
2009-09-23 00:00:00
slackware
slackware
[slackware-security] httpd
2010-01-25 05:19:48
redhat
redhat
(RHSA-2010:0011) Moderate: httpd and httpd22 security update
2010-01-06 00:00:00
(RHSA-2009:1579) Moderate: httpd security update
2009-11-11 00:00:00
(RHSA-2009:1580) Moderate: httpd security update
2009-11-11 00:00:00
oraclelinux
oraclelinux
httpd security update
2009-11-11 00:00:00
httpd security update
2009-11-11 00:00:00
debian
debian
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
2009-11-16 19:30:33
osv
osv
apache2 - several issues
2009-11-16 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: httpd-2.2.14-1.fc10
2009-12-10 04:17:40
[SECURITY] Fedora 11 Update: httpd-2.2.14-1.fc11
2010-02-27 03:41:04
[SECURITY] Fedora 12 Update: httpd-2.2.14-1.fc12
2009-12-18 04:22:30
seebug
seebug
apache2 vulnerabilities
2009-11-20 00:00:00
centos
centos
httpd, mod_ssl security update
2009-11-12 22:37:02
httpd, mod_ssl security update
2009-11-12 22:39:15
ubuntu
ubuntu
Apache vulnerabilities
2009-11-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.14-alt1
2009-10-06 00:00:00
suse
suse
potential code execution in apache2,libapr1
2009-10-26 13:21:56
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00