CVE-2009-1890 in Oracle HTTP Server
Zusammenfassung (Englisch)
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
Reservieren
02.06.2009
Veröffentlichung
05.07.2009
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 8299 | Oracle HTTP Server Web Listener Denial of Service | 189 | Proof-of-Concept | Offizieller Fix | CVE-2009-1890 |