Ubuntu.comUB:CVE-2010-0408CVE-2010-0408
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.112 Low
EPSS
Percentile
95.1%
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in
the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain
situations in which a client sends no request body, which allows remote
attackers to cause a denial of service (backend server outage) via a
crafted request, related to use of a 500 error code instead of the
appropriate 400 error code.
Notes
| Author | Note |
|---|---|
| mdeslaur | Apache 2.0 doesn’t have mod_proxy_ajp |
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.112 Low
EPSS
Percentile
95.1%