Update Protection against Apache mod_proxy Interim Responses Denial of Service
| Check Point Reference: | CPAI-2009-015 | |
| Date Published: | ||
| Severity: | ||
| Source: | Secunia Advisory: SA30621 | |
| Industry Reference(s): | CVE-2008-2364 | |
| Protection Provided by: |
IPS-1
|
|
| Who is Vulnerable? Apache 2.0.x Apache 2.2.x | ||
| Vulnerability Description A vulnerability has been identified in the popular Web server Apache, specifically in the mod_proxy module. The vulnerability can be exploited to consume large amounts of memory by tricking mod_proxy into sending an overly large number of interim responses to the client. Successful exploitation would result in denial of service. |
||
|
Update/Patch Available Visit the SVN repository. http://svn.apache.org/viewvc/httpd/ht...6154&r2=666153&pathrev=666154 |
|
|
Vulnerability Details The vulnerability is caused by an error in the "ap_proxy_http_process_response()" function when sending interim responses to the client, potentially resulting in a denial of service. |
Protection Overview
By enabling this protection, IPS-1 will detect and block a proxy exchange with more interim responses than the configured threshold. This threshold can be configured via the variable ' Maximum amount of interim HTTP responses per TCP connection'.
To configure the defense, select your product from the list below and follow the related protection steps.