REDHAT-BUG-521619: Null Pointer Dereference
A NULL pointer dereference flaw was discovered in httpd's modproxyftp module. Malicious FTP server can use this flaw to crash httpd's child process via malformed reply to EPSV FTP command.
Problem was confirmed in both 2.0.x and 2.2.x httpd versions.
References: http://www.intevydis.com/blog/?p=59 http://secunia.com/advisories/36549/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-521619?
The severity of REDHAT-BUG-521619 is moderate due to the potential for denial of service.
How do I fix REDHAT-BUG-521619?
To fix REDHAT-BUG-521619, upgrade Apache HTTP Server to version 2.2.x or later, where the issue has been addressed.
What versions are affected by REDHAT-BUG-521619?
REDHAT-BUG-521619 affects Apache HTTP Server versions 2.0.x and 2.2.x.
Can REDHAT-BUG-521619 be exploited remotely?
Yes, REDHAT-BUG-521619 can be exploited remotely by a malicious FTP server to crash the Apache HTTP Server.
What module is responsible for the vulnerability in REDHAT-BUG-521619?
The vulnerability in REDHAT-BUG-521619 is caused by a NULL pointer dereference flaw in the mod_proxy_ftp module.