CVE-2008-2364 in HTTP Server

Sumário (Inglês)

The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

21/05/2008

Divulgação

13/06/2008

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
9596	Oracle HTTP Server Web Listener Negação de Serviço	399	Prova de conceito	Correção oficial	CVE-2008-2364

Fontes

• MITRE
• NVD
• CVE Details