apache
Page content
- Author: vmiklos
- Vulnerable: 2.2.4-1
- Unaffected: 2.2.4-2terminus1
Some vulnerabilities have been acknowledged in Apache, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and by malicious people to conduct cross-site scripting attacks.
- An error in the mod_status module can be exploited by malicious people to conduct cross-site scripting attacks.
- An error in the Multi-Processing Module (MPM) can be exploited by malicious, local users to cause a DoS.
- An error in the mod_cache module in the handling of Cache-Control headers can be exploited to crash the child process via specially crafted requests. This could lead to a DoS if using a threaded Multi-Processing Module.
- Bug Tracker URL: http://bugs.frugalware.org/task/2298