|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user places a specially crafted .htaccess file in a root directory while safe mode is active. This will cause a segmentation fault, resulting in loss of availability for the service.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 4.4.1 or higher or to version 5.1.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
PHP
 |
4.0 |
4.0.x |
4.1.x |
4.2.x |
4.3.x |
4.4.0 |
5.0.0 candidate 1 |
5.0.0 candidate 2 |
5.0.0 candidate 3 |
5.0.1 |
5.0.2 |
5.0.3 |
5.0.4 |
5.0.5 |
5.0 |
|
|
|
|
|
|
|
Credit |
- Eric Romang - eromang
 zataz.net - ZATAZ Audit
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
