CVE-2003-0134: Medium severity Apache HTTP Server vulnerability
Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of service via requests related to device names.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the Apache HTTP Server instances affected (OS/2, versions 2.0 through 2.0.45) at the network perimeter — e.g., firewall, router ACLs, or WAF — to trusted IP addresses or networks only. Additionally configure request filtering/rate-limiting on the WAF or reverse proxy to block or throttle HTTP requests that reference device names (requests related to device names) to mitigate the denial-of-service condition.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0134?
CVE-2003-0134 has a medium severity, as it can lead to denial of service for affected Apache versions.
Which versions of Apache are affected by CVE-2003-0134?
CVE-2003-0134 affects Apache HTTP Server versions 2.0 through 2.0.45 running on OS2.
How do I fix CVE-2003-0134?
To fix CVE-2003-0134, upgrade your Apache HTTP Server to a version later than 2.0.45.
What kind of attack does CVE-2003-0134 allow?
CVE-2003-0134 allows unknown attackers to cause a denial of service via requests related to device names.
Is CVE-2003-0134 specific to a certain operating system?
Yes, CVE-2003-0134 is specific to Apache running on the OS2 operating system.