CVE-2008-2364 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-2364
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2364

Description: The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42987 UBUNTU http://www.ubuntu.com/usn/USN-731-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1 ST 1020267 SAID Secunia Advisory: SA33797 Secunia Advisory: SA32838 Secunia Advisory: SA32685 Secunia Advisory: SA33156 Secunia Advisory: SA32222 Secunia Advisory: SA31904 Secunia Advisory: SA31651 Secunia Advisory: SA31416 Secunia Advisory: SA31404 Secunia Advisory: SA31026 Secunia Advisory: SA30621 Secunia Advisory: SA34418 Secunia Advisory: SA34219 Secunia Advisory: SA34259 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0966.html http://rhn.redhat.com/errata/RHSA-2008-0967.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6084 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:237 http://www.mandriva.com/security/advisories?name=MDVSA-2008:195 HP http://marc.info/?l=bugtraq&m=125631037611762&w=2 http://marc.info/?l=bugtraq&m=123376588623823&w=2 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 GENTOO http://security.gentoo.org/glsa/glsa-200807-06.xml FEDORA CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328 http://www-01.ibm.com/support/docview.wss?uid=swg27008517 http://support.apple.com/kb/HT3216 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/498567/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/494858/100/0/threaded BID 31681 29653 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579

Return to the previous page.