CVE-2010-1452
Published: 28 July 2010
The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
Notes
Author | Note |
---|---|
mdeslaur | mod_cache is only affected on > 2.2.14 |
Priority
Status
Package | Release | Status |
---|---|---|
apache2 Launchpad, Ubuntu, Debian |
dapper |
Released
(2.0.55-4ubuntu2.12)
|
hardy |
Released
(2.2.8-1ubuntu0.19)
|
|
jaunty |
Ignored
(end of life)
|
|
karmic |
Released
(2.2.12-1ubuntu2.4)
|
|
lucid |
Released
(2.2.14-5ubuntu8.4)
|
|
maverick |
Not vulnerable
(2.2.16-1ubuntu2)
|
|
upstream |
Released
(2.2.16)
|
|
Patches: upstream: http://svn.apache.org/viewvc?view=revision&sortby=date&revision=966349 |