Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 安全漏洞
Vulnerability Description
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。Apache 2.0版本的2.0.40到2.0.45的基本验证模块(basic authentication)存在设计缺陷，远程攻击者可以利用这个漏洞对Apache服务进行拒绝服务攻击。当使用crypt_r或crypt此漏洞由于不正确处理thread_safely，当使用一个线程化(threaded)的MPM(在部分平台下不是默认安装)，允许远程攻击者利
CVSS Information
N/A
Vulnerability Type
N/A