From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu Apr 03 2003 - 04:55:07 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Apache Unspecified Denial of Service Vulnerability

READ ONLINE:
http://www.secunia.com/advisories/8499/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
From remote

SOFTWARE:
Apache 2.0.x

DESCRIPTION:
A "significant" Denial of Service vulnerability has been reported in
Apache 2.0.x prior to version 2.0.45.

Details of this vulnerability will be released on the 8th April 2003
according to the changelog. This advisory will be updated
accordingly, when more information is available.

NOTE: Apache 2.0.45 also fixes another well-known issue. Several file
descriptors are leaked to child processes, such as CGI scripts, which
could consitute a security threat on servers running untrusted CGI
scripts.

SOLUTION:
Update to version 2.0.45:
http://httpd.apache.org/download.cgi

REPORTED BY / CREDITS:
David Endler

ORIGINAL ADVISORY:
http://www.apache.org/dist/httpd/CHANGES_2.0

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]