| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.0.35, < 2.0.64≥ 2.2.0, < 2.2.14 | 2.0.642.2.14 |
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free