medium5.0Public exploit code
CVE-2003-0132
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, w…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apache 2.0.44 (Linux) - Remote Denial of Service2003-04-11 · dos · linux · Verified
- Apache 2.x - Memory Leak2003-04-09 · dos · windows · Verified
Impact
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | from 2.0.0 through 2.0.44 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/mhonarc/security-announce/msg00028.html
- http://marc.info/?l=bugtraq&m=104931360606484&w=2
- http://marc.info/?l=bugtraq&m=104982175321731&w=2
- http://marc.info/?l=bugtraq&m=104994239010517&w=2
- http://marc.info/?l=bugtraq&m=104994309010974&w=2
- http://marc.info/?l=bugtraq&m=105001663120995&w=2
- http://marc.info/?l=bugtraq&m=105013378320711&w=2
- http://secunia.com/advisories/34920
- http://secunia.com/advisories/8499
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147
- http://www.idefense.com/advisory/04.08.03.txt
- http://www.kb.cert.org/vuls/id/206537
- http://www.redhat.com/support/errata/RHSA-2003-139.html
- http://www.vupen.com/english/advisories/2009/1233
- https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E