CVE-2009-3094
08.09.2009, 18:30
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 2.0.35 ≤ 𝑥 < 2.0.64 |
| apache | http_server | 2.2.0 ≤ 𝑥 < 2.2.14 |
| debian | debian_linux | 4.0 |
| debian | debian_linux | 5.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
| ||||||||||||||
| apache2-devel |
| ||||||||||||||
| apache2-doc |
| ||||||||||||||
| apache2-example-pages |
| ||||||||||||||
| apache2-prefork |
| ||||||||||||||
| apache2-utils |
| ||||||||||||||
| apache2-worker |
|
Common Weakness Enumeration
References