Detections
Analytics
Apache < 2.0.46 Multiple Vulnerabilities
medium Log Correlation Engine Plugin ID 800571
Synopsis
The remote host is vulnerable to a Denial of Service (DoS) attack.Description
The remote server is running a version of Apache 2.x which is older than 2.0.45.This version is vulnerable to various flaw :
- There is a denial of service attack which may allow the attacker to disable this server remotely.
- The httpd process leaks file descriptors to child processes such as CGI scripts. An attacker who has the ability to execute arbitrary CGI scripts on this server (include PHP code) would be able to write arbitrary data in the files pointed to (in particular the log files).
Solution
Upgrade to Apache 2.0.46See Also
Plugin Details
Severity: Medium
ID: 800571
Family: Web Servers
Nessus ID: 11507
Reference Information
CVE: CVE-2003-0083, CVE-2003-0132