Description

The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.

Remediation

References

CVE-2014-0231

Related Vulnerabilities

Oracle JRE CVE-2012-5083 Vulnerability (CVE-2012-5083)

PHP Resource Management Errors Vulnerability (CVE-2010-4697)

WordPress Plugin File Manager Arbitrary File Upload (6.8)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6147)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3672)

Severity

Medium

Classification

CVE-2014-0231

Tags

Missing Update Known Vulnerabilities