Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 安全漏洞
Vulnerability Description
Apache是一款开放源代码WEB服务程序。Apache Web Server在处理IPv6通信时存在问题,远程攻击者可以利用这个漏洞对服务程序进行缓冲区溢出攻击。Apache的apr-util库中的IPv5 URI解析函数存在输入验证错误,当使用libc内存拷贝函数时不正确处理字符串长度参数,可触发缓冲区溢出,精心构建提交数据可以在基于BSD UNIX的系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A