Apache HTTP server contains a flaw that may allow a local denial of service. The issue is triggered when a local user with privileges as the Apache UID sends a SIGUSR1 signal to any process as root, resulting in loss of availability of the system.

Upgrade to Apache version 1.3.27 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• ISS X-Force ID: 10280
• CVE ID: 2002-0839 (see also: NVD)
• Secunia Advisory ID: 44532
• Bugtraq ID: 5884
• CERT VU: 825353
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html
  http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html
  http://seclists.org/bugtraq/2011/May/69
• Vendor URL: http://httpd.apache.org/
• Vendor Specific Advisory URL: http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0928.1
  http://www.apacheweek.com/features/security-13
  http://www.debian.org/security/2002/dsa-187
  http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:068-1
  http://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-arc-101497.html
  http://www.oracle.com/technology/deploy/security/pdf/2002alert45rev1.pdf
  https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02824490
• Generic Exploit URL: http://www.securiteam.com/exploits/6R00S2060U.html
• Other Advisory URL: http://www.securiteam.com/unixfocus/6S001155PG.html
  http://www.xatrix.org/article.php?s=1966
• CIAC Advisory: N-005
• RedHat RHSA: RHSA-2002:222-21

• zen-parse -