Lucene search
Ubuntu.comUB:CVE-2010-0408HistoryMar 05, 2010 - 12:00 a.m.
CVE-2010-0408
2010-03-0500:00:00
ubuntu.com
ubuntu.com
19
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.112
Percentile
95.2%
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in
the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain
situations in which a client sends no request body, which allows remote
attackers to cause a denial of service (backend server outage) via a
crafted request, related to use of a 500 error code instead of the
appropriate 400 error code.
Notes
| Author | Note |
|---|---|
| mdeslaur | Apache 2.0 doesn’t have mod_proxy_ajp |
Related
prion
prion
Design/Logic Flaw
2010-03-05 16:30:00
debiancve
debiancve
CVE-2010-0408
2010-03-05 16:30:00
httpd
httpd
Apache Httpd < 2.2.15 : mod_proxy_ajp DoS
2010-02-02 00:00:00
openvas
openvas
Mandriva Update for mmc-wizard MDVA-2010:053 (mmc-wizard)
2010-02-15 00:00:00
Mandriva Update for mmc-wizard MDVA-2010:053 (mmc-wizard)
2010-02-15 00:00:00
Mandriva Update for apache MDVSA-2010:053 (apache)
2010-03-12 00:00:00
cvelist
cvelist
CVE-2010-0408
2010-03-05 16:00:00
cve
cve
CVE-2010-0408
2010-03-05 16:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:47:47
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2010:053)
2010-03-03 00:00:00
Scientific Linux Security Update : httpd on SL5.x i386/x86_64
2012-08-01 00:00:00
openSUSE Security Update : apache2 (openSUSE-SU-2010:0165-1)
2010-04-27 00:00:00
f5
f5
K52470083 : Apache vulnerability CVE-2010-0408
2015-12-23 00:00:00
SOL52470083 - Apache vulnerability CVE-2010-0408
2015-12-23 00:00:00
nvd
nvd
CVE-2010-0408
2010-03-05 16:30:00
osv
osv
apache2 - several issues
2010-04-17 00:00:00
debian
debian
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
redhat
redhat
(RHSA-2010:0168) Moderate: httpd security and enhancement update
2010-03-25 00:00:00
(RHSA-2010:0396) Moderate: httpd and httpd22 security and enhancement update
2010-05-05 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2010-03-10 00:00:00
oraclelinux
oraclelinux
httpd security and enhancement update
2010-03-25 00:00:00
centos
centos
httpd, mod_ssl security update
2010-03-28 15:40:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.15-1.fc11.1
2010-05-04 06:06:43
[SECURITY] Fedora 12 Update: httpd-2.2.15-1.fc12.2
2010-05-31 18:25:29
[SECURITY] Fedora 13 Update: httpd-2.2.15-1.fc13
2010-04-22 22:51:41
slackware
slackware
[slackware-security] httpd
2010-03-08 22:39:33
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.16-alt1
2010-09-16 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.16-alt1
2010-09-16 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.16-alt1
2010-09-16 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
securityvulns
securityvulns
Apple Mac OS X and QuickTime multiple security vulnerabilities
2013-11-18 00:00:00
About the security content of Mac OS X v10.6.5 and Security Update 2010-007
2010-11-18 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.112
Percentile
95.2%
Related for UB:CVE-2010-0408