CVE-2010-0408

Published: Mar 5, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.

Affected (12)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 2.2.0
Apache Http Server	Version 2.2.11
Apache Http Server	Version 2.2.12
Apache Http Server	Version 2.2.13
Apache Http Server	Version 2.2.14
Apache Http Server	Version 2.2.2
Apache Http Server	Version 2.2.3
Apache Http Server	Version 2.2.4
Apache Http Server	Version 2.2.6
Apache Http Server	Version 2.2.8
Apache Http Server	Version 2.2.9
Apache Http Server	Version 2.2

References (88)

http://httpd.apache.org/security/vulnerabilities_22.html

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: secalert@redhat.com

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

Source: secalert@redhat.com

Third Party Advisory

http://marc.info/?l=bugtraq&m=127557640302499&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/39100

Source: secalert@redhat.com

URL Repurposed

http://secunia.com/advisories/39501

Source: secalert@redhat.com

URL Repurposed

http://secunia.com/advisories/39628

Source: secalert@redhat.com

URL Repurposed

http://secunia.com/advisories/39632

Source: secalert@redhat.com

URL Repurposed

http://secunia.com/advisories/39656

Source: secalert@redhat.com

URL Repurposed

http://secunia.com/advisories/40096

Source: secalert@redhat.com

URL Repurposed

http://support.apple.com/kb/HT4435

Source: secalert@redhat.com

Broken Link

http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ajp.c?r1=917876&r2=917875&pathrev=917876

Source: secalert@redhat.com

PatchThird Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=917876

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1PM08939

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-2035

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2010:053

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0168.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/38491

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/0911

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/0994

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1001

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1057

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1411

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=569905

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8619

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9935

Source: secalert@redhat.com

Broken Link

http://httpd.apache.org/security/vulnerabilities_22.html