Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Web Servers >> Apache < 2.0.51


Vulnerability Assessment Details

Apache < 2.0.51

Vulnerability Assessment Summary
Checks for version of Apache

Detailed Explanation for this Vulnerability Assessment

The remote host is running a version of Apache2 which is older than 2.0.51.

It is reported that versions prior 2.0.51 are prone to a remote denial of
service issue. A possible hacker may issue a specific sequence of DAV LOCK commands
to crash the process. If Apache is configured to use threads, it may
completely crash the Apache process.

In addition to this, versions prior 2.0.51 are prone to a remote buffer
overflow when parsing an URI sent over IPv6. A possible hacker may use this flaw
to execute arbitrary code on the remote host or to deny service to legitimate
users.

See also : http://issues.apache.org/bugzilla/show_bug.cgi?id=31183
Solution : Upgrade to Apache 2.0.51
Network Security Threat Level: High

Networks Security ID: 11185, 11187

Vulnerability Assessment Copyright: This script is Copyright (C) 2004-2006 Tenable Network Security

Cables, Connectors


12 Core 2.5GHz 25MB Intel Xeon E5-2696 V2 SR19G LGA-2011 Server CPU  picture

12 Core 2.5GHz 25MB Intel Xeon E5-2696 V2 SR19G LGA-2011 Server CPU

$44.95



Dell Precision T3610 Xeon E5-1620v2 16GB RAM 128 SSD 1TB HDD QuadroK240 Win10Pro picture

Dell Precision T3610 Xeon E5-1620v2 16GB RAM 128 SSD 1TB HDD QuadroK240 Win10Pro

$189.99



Intel Xeon CPU X5680 3.33GHz 12MB Cache Hexa Core Socket LGA1366 Processor SLBV5 picture

Intel Xeon CPU X5680 3.33GHz 12MB Cache Hexa Core Socket LGA1366 Processor SLBV5

$24.99



Intel Xeon E5-2699 v3 18 Core 2.3 GHz 45MB SR1XD LGA 2011-3 B Grade CPU picture

Intel Xeon E5-2699 v3 18 Core 2.3 GHz 45MB SR1XD LGA 2011-3 B Grade CPU

$119.95



Intel Xeon X5675 SLBYL 3.06GHz CPU Processor picture

Intel Xeon X5675 SLBYL 3.06GHz CPU Processor

$11.19



CM8066002031501 INTEL XEON E5-2680V4 2.40GHZ 35MB 14-CORE 120W PROCESSOR picture

CM8066002031501 INTEL XEON E5-2680V4 2.40GHZ 35MB 14-CORE 120W PROCESSOR

$78.00



Intel Xeon E5-2699 v3 2.3 GHz 45 MB 18 Core SR1XD LGA2011-3 Clean Pull CPU picture

Intel Xeon E5-2699 v3 2.3 GHz 45 MB 18 Core SR1XD LGA2011-3 Clean Pull CPU

$122.95



Intel Xeon E5-2683 v4 16 Core 40MB 2.1GHz 9.6 GT/s SR2JT LGA2011-3 B Grade CPU picture

Intel Xeon E5-2683 v4 16 Core 40MB 2.1GHz 9.6 GT/s SR2JT LGA2011-3 B Grade CPU

$85.49



Intel Xeon E5-2470 V2 2.4GHz 25MB 8GT/s SR19S LGA1356 CPU Processor picture

Intel Xeon E5-2470 V2 2.4GHz 25MB 8GT/s SR19S LGA1356 CPU Processor

$37.98



Intel Xeon E5-2667 V2 SR19W 3.30GHz 8Cores 130W IvyBridge EP  25MB 130W LGA2011  picture

Intel Xeon E5-2667 V2 SR19W 3.30GHz 8Cores 130W IvyBridge EP 25MB 130W LGA2011

$39.00



Discussions

No Discussions have been posted on this vulnerability.