Mar 10
10
Multiple Vulnerabilities found in Apache
Share This
|
1% | Start a Discussion
Some vulnerabilities have been reported in Apache HTTP Server, which can be exploited by malicious people to gain access to potentially sensitive information, cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
1) The “ap_proxy_ajp_request()” function in modules/proxy/mod_proxy_ajp.c of the mod_proxy_ajp module returns the “HTTP_INTERNAL_SERVER_ERROR” error code when processing certain malformed requests. This can be exploited to put the backend server into an error state until the retry timeout expired by sending specially crafted requests.
2) The mod_isapi module unloads ISAPI modules before the request processing is complete, potentially leaving orphaned callback pointers behind. This can be exploited by sending a specially crafted request followed by a reset packet.
Successful exploitation may allow the execution of arbitrary code with SYSTEM privileges on Windows systems.
3) An error exists within the header handling when processing subrequests, which can lead to sensitive information from a request being handled by the wrong thread if a multi-threaded Multi-Processing Module (MPM) is used.
To protect yourself and your server please upgrade to version 2.2.15 as soon as you can.


Revo Uninstaller helps you to uninstall software and remove unwanted programs installed on your computer even if you have problems uninstalling and cannot uninstall them from “Windows Add or Remove Programs” control panel applet.
Weekly Stats Chart
Wordpress.org
