NetSight
IP …
medium4.6Public exploit code

CVE-2012-0031

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.0 before 2.0.65
from 2.2.0 before 2.2.22
DebianDebian Linux
Versions 5.0, 6.0, 7.0
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Server
Version 10
SuseLinux Enterprise Software Development Kit
Version 10
RedhatJboss Enterprise Web Server
Version 1.0.0
RedhatStorage
Version 2.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Workstation
Version 6.0

References