Evaluator Impact

Per: http://httpd.apache.org/security/vulnerabilities_22.html 'A flaw was found in the handling of requests by mod_cache and mod_dav. A malicious remote attacker could send a carefully crafted request and cause a httpd child process to crash. This crash would only be a denial of service if using the worker MPM. This issue is further mitigated as mod_dav is only affected by requests that are most likely to be authenticated, and mod_cache is only affected if the uncommon "CacheIgnoreURLSessionIdentifiers" directive, introduced in version 2.2.14, is used.'

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

References to Check Content

Identifier:

oval:org.mitre.oval:def:11683

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11683

Identifier:

oval:org.mitre.oval:def:12341

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12341

Change History

OR
     *cpe:2.3:a:apache:http_server:2.2.5:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12341 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11683 [No Types Assigned]

http://marc.info/?l=bugtraq&m=133355494609819&w=2