HTTP: Apache Multipart Form-Data Denial of Service
This signature detects attempts to exploit a known vulnerability against the Apache daemon with PHP support. Apache 1.3.x with php_4.0.6 is vulnerable. Attackers can send a multipart/form-data POST request to crash the Apache daemon process.
Extended Description
A vulnerability has been reported for PHP versions 4.2.0 and 4.2.1. It is possible for a remote attacker to cause the PHP interpreter to crash the web server on a vulnerable system and execute malicious, attacker supplied code. The vulnerability is the result of the PHP interpreter incorrectly parsing MIME headers when HTTP POST commands are received. When PHP receives a malformed POST request, it generates an error condition that is improperly handled. As a result, the attacker may cause the web server to crash and possibly execute supplied code.
Affected Products
Php php
Short Name
HTTP:APACHE:PHP-DOS
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Apache CVE-2002-0717 Denial Form-Data Multipart Service bid:5278 of
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Php
CVSS Score
7.5