Apache HTTP Server Prefork MPM module denial of service

apache-child-process-dos (35095) The risk level is classified as LowLow Risk

Description:

Apache HTTP Server when used with the Prefork MPM module could allow a local attacker to cause a denial of service. An attacker could modify the worker_score and process_score arrays in a way that would cause a SIGUSR1 signal to be sent to arbitrary child processes, resulting in a denial of service.

Platforms Affected:

  • Apache, HTTP Server 1.3.37
  • Apache, HTTP Server 1.3.38 Dev
  • Apache, HTTP Server 2.0.59
  • Apache, HTTP Server 2.0.60 Dev
  • Apache, HTTP Server 2.2.4
  • Apache, HTTP Server 2.2.5 Dev
  • Avaya, AES
  • Avaya, CCS/SES SES 4.0 and prior
  • Avaya, Communication Manager 2.x
  • Avaya, Communication Manager 3.x
  • Avaya, Communication Manager 4.x
  • Avaya, EMMC
  • Avaya, Intuity Audix LX
  • Avaya, Message Networking
  • Avaya, Messaging Storage Server 3.x
  • Avaya, Messaging Storage Server
  • Canonical, Ubuntu 6.06 LTS
  • Canonical, Ubuntu 6.10
  • Canonical, Ubuntu 7.04
  • FUJITSU, Interstage Application Server Ent. Ed 5.0 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 5.0 (Turbolinux)
  • FUJITSU, Interstage Application Server Ent. Ed 5.0.1 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 6.0 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 6.0 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 7.0 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 7.0 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 7.0.1 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 7.0.1 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 8.0.0 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 8.0.0 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 8.0.2 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 8.0.2 (Solaris)
  • FUJITSU, Interstage Application Server Ent. Ed 9.0.0 (RHEL)
  • FUJITSU, Interstage Application Server Ent. Ed 9.0.0 (Solaris)
  • FUJITSU, Interstage Application Server Plus 7.0 (RHEL)
  • FUJITSU, Interstage Application Server Plus 7.0 (Solaris)
  • FUJITSU, Interstage Application Server Plus 7.0.1 (RHEL)
  • FUJITSU, Interstage Application Server Plus 7.0.1 (Solaris)
  • FUJITSU, Interstage Application Server Std Ed 5.0 (Solaris)
  • FUJITSU, Interstage Application Server Std Ed 5.0 (Turbolinux)
  • FUJITSU, Interstage Application Server Std J 8.0.0 (RHEL)
  • FUJITSU, Interstage Application Server Std J 8.0.2 (RHEL)
  • FUJITSU, Interstage Application Server Std J 9.0.0 (RHEL)
  • FUJITSU, Interstage Application Server Std. J 8.0.0 (Solaris)
  • FUJITSU, Interstage Application Server Web - J Ed 5.0 (Solaris)
  • FUJITSU, Interstage Application Server Web - J Ed 5.0 (Turbolinux)
  • FUJITSU, Interstage Business App. Server Ent. Ed 8.0.0 (RHEL)
  • FUJITSU, Interstage Job Workload Server 8.1.0 (RHEL)
  • Gentoo, Linux
  • HP, HP-UX B.11.11
  • HP, HP-UX B.11.23
  • HP, HP-UX B.11.31
  • IBM, HTTP Server 2.0.47
  • IBM, HTTP Server prior to 6.0.2.23
  • IBM, HTTP Server prior to 6.1.0.13
  • IBM, HTTP Server for WebSphere 6.1.0 on z/OS
  • Mandriva, Corporate Server 3.0 X86_64
  • Mandriva, Corporate Server 3.0
  • Mandriva, Corporate Server 4.0
  • Mandriva, Corporate Server 4.0 X86_64
  • Mandriva, Linux 2007 X86_64
  • Mandriva, Linux 2007
  • Mandriva, Linux 2007.1 X86_64
  • Mandriva, Linux 2007.1
  • Mandriva, Linux 2008.0 X86_64
  • Novell, Linux Desktop 9
  • Novell, Linux Desktop 9 SDK
  • Novell, Linux POS 9
  • Novell, Open Enterprise Server
  • Novell, Open Enterprise Server
  • Novell, OpenSUSE 10.2
  • Novell, OpenSUSE 10.3
  • Novell, SLE SDK 10 SP1
  • Novell, SUSE Linux Enterprise Desktop 10 SP1
  • Novell, SUSE Linux Enterprise Server 10
  • Novell, SUSE Linux Enterprise Server 10 SP1
  • RedHat, Enterprise Linux 2.1 AS
  • RedHat, Enterprise Linux 2.1 ES
  • RedHat, Enterprise Linux 2.1 WS
  • RedHat, Enterprise Linux 3 Desktop
  • RedHat, Enterprise Linux 3 AS
  • RedHat, Enterprise Linux 3 WS
  • RedHat, Enterprise Linux 3 ES
  • RedHat, Enterprise Linux 4 AS
  • RedHat, Enterprise Linux 4 ES
  • RedHat, Enterprise Linux 4 Desktop
  • RedHat, Enterprise Linux 4 WS
  • RedHat, Enterprise Linux 5 Client Workstation
  • RedHat, Enterprise Linux 5
  • RedHat, Enterprise Linux 5 Client
  • RedHat, Enterprise Linux Desktop 5.0
  • RedHat, Linux Advanced Workstation 2.1 Itanium
  • RedHat, Network Proxy 4.2
  • RedHat, Network Proxy 5.0
  • RedHat, Network Satellite Server 4.2
  • RedHat, Network Satellite Server 5.0
  • RedHat, Red Hat Application Stack v1 for EL AS 4
  • RedHat, Red Hat Application Stack v1 for EL ES 4
  • SuSE, SLE SDK 10
  • SuSE, SuSE Linux 10.0
  • SuSE, SuSE Linux 10.1
  • SuSE, SuSE SLES 9
  • Turbolinux, Turbolinux 10 Server
  • Turbolinux, Turbolinux 10 Server x64 Ed
  • Turbolinux, Turbolinux FUJI
  • Turbolinux, Turbolinux Appliance Server 2.0

Remedy:

Upgrade to the latest version of Apache (1.3.39 or later), (2.0.61 or later) or (2.2.6 or later), available from the Apache Web site. See References.

For other distributions:
Apply the appropriate update for your system. See References.

Consequences:

Denial of Service

References:

Reported:

May 29, 2007

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.

For corrections or additions please email xforce@iss.net

Return to the main page