HTTP: Apache apr-util IPv6 URI Parsing Denial of Service
This signature detects attempts to exploit a known vulnerability against Apache web server version 2.0.50 and earlier. A successful attack can lead to denial of service.
Extended Description
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
Affected Products
Apache http_server
References
CVE: CVE-2004-0786
Short Name
HTTP:APACHE:APR-UTIL-LIB-DOS
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Apache CVE-2004-0786 Denial IPv6 Parsing Service URI apr-util of
Release Date
11/26/2012
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Apache
CVSS Score
5.0