Info

Disclosure

Oct 24, 2005

Discovery

Unknown

Dates

Exploit

Oct 24, 2005

Solution

Unknown

Description

The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user places a specially crafted .htaccess file in a root directory while safe mode is active. This will cause a segmentation fault, resulting in loss of availability for the service.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade to version 4.4.1 or higher or to version 5.1.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

PHP Group	PHP	4.0.x
		4.1.x
		4.2.x
		4.3.x
		4.4.0
		5.0.0 candidate 1
		5.0.0 candidate 2
		5.0.0 candidate 3
		5.0.1
		5.0.2
		5.0.3
		5.0.4
		5.0.5
		4.0
		5.0

References

Bugtraq ID: 15177
Secunia Advisory ID: 17557 18198 19064 22691
CVE ID: 2005-3319 (see also: NVD)
ISS X-Force ID: 22844
Keyword: HPSBMA02159,SSRT061238
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html
http://bugs.gentoo.org/show_bug.cgi?id=98871
http://marc.theaimsgroup.com/?l=bugtraq&m=113019286208204&w=2
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=107602
Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=303382
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
Other Advisory URL: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:213
http://www.ubuntu.com/usn/usn-232-1
News Article: http://www.informationweek.com/news/showArticle.jhtml;?articleID=181500394

Credit

Eric Romang - eromangzataz.net - ZATAZ Audit

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

PHP Group

PHP

References

Credit