CVE-2009-3094
Published: 8 September 2009
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
apache2 Launchpad, Ubuntu, Debian |
dapper |
Released
(2.0.55-4ubuntu2.9)
|
| hardy |
Released
(2.2.8-1ubuntu0.14)
|
|
| intrepid |
Released
(2.2.9-7ubuntu3.5)
|
|
| jaunty |
Released
(2.2.11-2ubuntu2.5)
|
|
| karmic |
Released
(2.2.12-1ubuntu2.1)
|
|
| upstream |
Released
(2.2.14)
|
|
|
Patches: upstream: http://svn.apache.org/viewvc?revision=814652&view=revision |
||