CVE-2009-3094
08.09.2009, 18:30
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 2.0.35 ≤ 𝑥 < 2.0.64 |
| apache | http_server | 2.2.0 ≤ 𝑥 < 2.2.14 |
| debian | debian_linux | 4.0 |
| debian | debian_linux | 5.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References