CVE-1999-1293: Critical severity Apache HTTP Server vulnerability
modproxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Apache Http Server (mod_proxy)from your environment.Uninstall or remove the mod_proxy module from the server if proxy functionality is not required.
- Configuration
If running Apache 1.2.5 or earlier, disable the mod_proxy module (and mod_proxy_ftp if present) in the Apache configuration to prevent processing of FTP commands.
Apache Http Server (mod_proxy) module enabled = disabled - Compensating control
Block or restrict access to FTP proxy endpoints and related ports (for example, port 21) at network perimeter firewalls or inline filters to prevent external attackers from sending malformed FTP commands to Apache.
- Operational
Restart the Apache service after disabling or removing mod_proxy to ensure the configuration change takes effect.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1293?
CVE-1999-1293 is classified as a denial of service vulnerability.
How do I fix CVE-1999-1293?
To fix CVE-1999-1293, upgrade Apache HTTP Server to version 1.3 or later.
What versions of Apache are affected by CVE-1999-1293?
CVE-1999-1293 affects Apache HTTP Server version 1.2.5 and earlier.
Can CVE-1999-1293 be exploited remotely?
Yes, CVE-1999-1293 can be exploited remotely through malformed FTP commands.
What impact does CVE-1999-1293 have on my server?
CVE-1999-1293 can cause your server to crash and produce a core dump.