CVE-2004-0174— Apache 安全漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Apache是一款开放源代码WEB服务程序。Apache存在安全问题，远程攻击者可以利用这个漏洞对Apache服务进行拒绝服务攻击。远程攻击者通过一个在一个极少有可能访问的端口上监听的套接口，可使Apache引起拒绝服务攻击。这可封闭到服务器的新的连接，直到初始化在另一个极少有可能访问的端口上发起的其他连接。连接阻挡(connect blocking)功能除了Windows平台之外，其他所有平台中默认打开。

CVE-2004-0174 影响 n/a n/a。利用概率较高，应尽快评估。Apache是一款开放源代码WEB服务程序。Apache存在安全问题，远程攻击者可以利用这个漏洞对Apache服务进行拒绝服务攻击。远程攻击者通过一个在一个极少有可能访问的端口上监听的套接口，可使Apache引起拒绝服务攻击。这可封闭到服务器的新的连接，直到初始化在另一个极少有可能访问的端口上发起的其他连接。连接阻挡(connect blocking)功能除 CVE-2004-0174 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2004-0174

一、 漏洞 CVE-2004-0174 基础信息

受影响产品

二、漏洞 CVE-2004-0174 的公开POC

三、漏洞 CVE-2004-0174 的情报信息

CVE-2004-0174 厂商安全公告 (9)

• http://www.securityfocus.com/bid/9921 vdb-entry x_refsource_BID
• http://secunia.com/advisories/11170 third-party-advisory x_refsource_SECUNIA
• http://www.securitytracker.com/alerts/2004/Mar/1009495.html vdb-entry x_refsource_SECTRACK
• http://www.kb.cert.org/vuls/id/132110 third-party-advisory x_refsource_CERT-VN
• http://security.gentoo.org/glsa/glsa-200405-22.xml vendor-advisory x_refsource_GENTOO
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:046 vendor-advisory x_refsource_MANDRAKE
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1982 vdb-entry signature x_refsource_OVAL
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100110 vdb-entry signature x_refsource_OVAL
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15540 vdb-entry x_refsource_XF

CVE-2004-0174 邮件列表归档 (19)

• http://marc.info/?l=bugtraq&m=108731648532365&w=2 vendor-advisory x_refsource_HP
• http://marc.info/?l=bugtraq&m=108066914830552&w=2 vendor-advisory x_refsource_TRUSTIX
• http://marc.info/?l=bugtraq&m=108369640424244&w=2 vendor-advisory x_refsource_APPLE
• 🔗 '[ANNOUNCE] Apache HTTP Server 2.0.49 Released (fwd)' - MARC 查看完整文章 mailing-list x_refsource_BUGTRAQ
• http://marc.info/?l=bugtraq&m=108437852004207&w=2 mailing-list x_refsource_BUGTRAQ
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
• https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST

CVE-2004-0174 其他参考 (5)

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1 vendor-advisory x_refsource_SUNALERT
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1 vendor-advisory x_refsource_SUNALERT
• http://www.trustix.org/errata/2004/0027 vendor-advisory x_refsource_TRUSTIX
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643 vendor-advisory x_refsource_SLACKWARE
• http://www.redhat.com/support/errata/RHSA-2004-405.html vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2004-0174

同批安全公告 · n/a · 2004-03-25 · 共 14 条

IV. Related Vulnerabilities

V. Comments for CVE-2004-0174