CVE-2014-0226 in Apple MacOS X

Résumé (Anglaise)

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

Réserver

02/12/2013

Divulgation

20/07/2014

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
74706	Apple MacOS X Apache race condition	362	Preuve de concept	Correctif officiel	CVE-2014-0226
68792	Oracle Secure Global Desktop mod_status mod_status.c lua_ap_scoreboard_worker race condition	362	Preuve de concept	Correctif officiel	CVE-2014-0226
68687	Oracle Enterprise Manager Ops Center Update Provisioning race condition	362	Preuve de concept	Correctif officiel	CVE-2014-0226
68658	Oracle HTTP Server Web Listener mod_status.c lua_ap_scoreboard_worker race condition	362	Preuve de concept	Correctif officiel	CVE-2014-0226
67185	Apache HTTP Server mod_status race condition	362	Preuve de concept	Correctif officiel	CVE-2014-0226