| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 1.3.26= 1.3.27= 1.3.28= 1.3.29= 1.3.31 | |
| virtualvault | = 11.0.4 | |
| webproxy | = 2.0= 2.1 | |
| http server | = 1.3.26= 1.3.26.1= 1.3.26.2= 1.3.28 | |
| propack | = 2.4 |
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free