Description

This alert was generated using only banner information. It may be a false positive.

By sending a specially crafted request followed by a reset packet it is possible to trigger a vulnerability in Apache mod_isapi that will unload the target ISAPI module from memory. However function pointers still remain in memory and are called when published ISAPI functions are referenced. This results in a dangling pointer vulnerability.

Affected Apache versions (up to 2.2.14 on Windows platform).

Remediation

Upgrade Apache to the latest version.

References

Apache 2.2.14 mod_isapi Dangling Pointer

Apache homepage

Related Vulnerabilities

MySQL CVE-2020-14568 Vulnerability (CVE-2020-14568)

YetiForce CRM Improper Input Validation Vulnerability (CVE-2021-4111)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9775)

Joomla! Core Arbitrary File Upload (2.5.0 - 3.8.7)

Oracle Database Server CVE-2010-0901 Vulnerability (CVE-2010-0901)

Severity

High

Classification

CVE-2010-0425 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Tags

Code Execution Missing Update