Apache HTTP Server ap_get_mime_headers_core denial of service
| apache-apgetmimeheaderscore-dos (16524) |  Medium Risk |
Description:
Apache HTTP Server is vulnerable to a denial of service attack, caused by a vulnerability in the ap_get_mime_headers_core function in the protocol.c file. By sending a large amount of specially-crafted data, a remote attacker could consume an arbitrary amount of available memory and cause the server to crash.
Consequences:
Denial of Service
Remedy:
For Gentoo Linux:
Upgrade to the latest apache package (2.0.49-r4, < 2 or later), as listed in Gentoo Security Advisory 200407-03 . See References.
For Red Hat Linux:
Upgrade to the latest apache package, as listed below. Refer to RHSA-2004:342-10 for more information. See References.
Red Hat Enterprise Linux AS (v. 3), ES (v. 3), WS (v. 3), Desktop: 2.0.46-32.ent.3.x86_64 or later
For Trustix Secure Linux:
Upgrade to the latest apache package, as listed below. Refer to Trustix Secure Linux Security Advisory #2004-0039 for more information. See References.
For IBM HTTP Server:
Apply the APAR PQ90698, as listed in IBM Global Services Managed Security Services Outside Advisory MSS-OAR-E01-2004:1080.1. See References.
For HP-UX 11.00, 11.11, 11.22, and 11.23:
Apply the appropriate patch for your system, as listed in Hewlett-Packard Company Security Bulletin HPSBUX01064. See References.
For Conectiva Linux:
Upgrade to the latest apache package, as listed below. Refer to Conectiva Linux Security Announcement CLSA-2004:868 for more information. See References.
Conectiva Linux 10: 2.0.49-61251U10_1cl or later
Conectiva Linux 9: 2.0.45-28790U90_8cl or later
For other distributions:
Apply the appropriate update for your system. See References.
References:
- CIAC Information Bulletin 0-169: Apache Buffer Overflow Vulnerability [REVISED 29 Jun 2004].
- CIAC Information Bulletin O-169: Apache Buffer Overflow Vulnerability [REVISED 4 Aug 2004].
- CIAC Information Bulletin O-212: Apple Security Update.
- Conectiva Linux Security Announcement CLSA-2004:868: Several vulnerabilities in apache, mod_ssl and mod_dav.
- Full-Disclosure Mailing List, Mon Jun 28 2004 - 09:48:51 CDT : DoS in apache httpd 2.0.49, yet still apache much better than windows.
- IBM Systems Support Web site: Support for HMC.
- Trustix Secure Linux Security Advisory #2004-0039: Several security vulnerabilities patched.
- BID-10619: Apache ap_escape_html Memory Allocation Denial Of Service Vulnerability
- CVE-2004-0493: The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
- GLSA-200407-03: Apache 2: Remote denial of service attack
- MDKSA-2004:064: Updated apache2 packages fix DoS vulnerability
- RHSA-2004-342: httpd security update
- SUSE-SA:2004:021: php4 / mod_php4: remote code execution
Platforms Affected:
- Apache HTTP Server 2.0.47
- Apache HTTP Server 2.0.48
- Apache HTTP Server 2.0.49
- Conectiva Linux 10
- Conectiva Linux 9.0
- Gentoo Linux
- HP HP-UX 11.00
- HP HP-UX 11.11
- HP HP-UX 11.22
- HP HP-UX 11.23
- IBM HTTP Server
- MandrakeSoft Mandrake Linux 10.0 AMD64
- MandrakeSoft Mandrake Linux 10.0
- MandrakeSoft Mandrake Linux 9.1
- MandrakeSoft Mandrake Linux 9.1 PPC
- MandrakeSoft Mandrake Linux 9.2 AMD64
- MandrakeSoft Mandrake Linux 9.2
- Novell UnitedLinux 1.0
- RedHat Enterprise Linux 3 ES
- RedHat Enterprise Linux 3 Desktop
- RedHat Enterprise Linux 3 AS
- RedHat Enterprise Linux 3 WS
- RedHat Linux 3.0
- SuSE Linux Enterprise Server 8
- SUSE SuSE Linux 8.0
- SUSE SuSE Linux 8.1
- SUSE SuSE Linux 8.2
- SUSE SuSE Linux 9.0
- SUSE SuSE Linux 9.1
- SuSE SuSE Linux Office Server
- Trustix Secure Enterprise Linux 2.0
- Trustix Secure Linux 1.5
- Trustix Secure Linux 2.0
- Trustix Secure Linux 2.1
Reported:
Jun 28, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email ignore thisxforceignore this@ignore thisus.ignore thisibm.comignore this