CVE

Id
43009  
CVE No.
CVE-2010-0425  
Status
Candidate  
Description
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468928 43009 CVE-2010-0425 MLIST:[security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues  View
468929 43009 CVE-2010-0425 URL:http://lists.vmware.com/pipermail/security-announce/2010/000105.html  View
468930 43009 CVE-2010-0425 MISC:http://www.senseofsecurity.com.au/advisories/SOS-10-002  View
468931 43009 CVE-2010-0425 CONFIRM:http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870  View
468932 43009 CVE-2010-0425 CONFIRM:http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870  View
468933 43009 CVE-2010-0425 CONFIRM:http://svn.apache.org/viewvc?view=revision&revision=917870  View
468934 43009 CVE-2010-0425 CONFIRM:http://httpd.apache.org/security/vulnerabilities_20.html  View
468935 43009 CVE-2010-0425 CONFIRM:http://httpd.apache.org/security/vulnerabilities_22.html  View
468936 43009 CVE-2010-0425 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2010-0014.html  View
468937 43009 CVE-2010-0425 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
468938 43009 CVE-2010-0425 AIXAPAR:PM09447  View
468939 43009 CVE-2010-0425 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM09447  View
468940 43009 CVE-2010-0425 AIXAPAR:PM12247  View
468941 43009 CVE-2010-0425 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247  View
468942 43009 CVE-2010-0425 CERT-VN:VU#280613  View
468943 43009 CVE-2010-0425 URL:http://www.kb.cert.org/vuls/id/280613  View
468944 43009 CVE-2010-0425 BID:38494  View
468945 43009 CVE-2010-0425 URL:http://www.securityfocus.com/bid/38494  View
468946 43009 CVE-2010-0425 OVAL:oval:org.mitre.oval:def:8439  View
468947 43009 CVE-2010-0425 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8439  View
468948 43009 CVE-2010-0425 SECTRACK:1023701  View
468949 43009 CVE-2010-0425 URL:http://www.securitytracker.com/id?1023701  View
468950 43009 CVE-2010-0425 SECUNIA:38978  View
468951 43009 CVE-2010-0425 URL:http://secunia.com/advisories/38978  View
468952 43009 CVE-2010-0425 SECUNIA:39628  View
468953 43009 CVE-2010-0425 URL:http://secunia.com/advisories/39628  View
468954 43009 CVE-2010-0425 VUPEN:ADV-2010-0634  View
468955 43009 CVE-2010-0425 URL:http://www.vupen.com/english/advisories/2010/0634  View
468956 43009 CVE-2010-0425 VUPEN:ADV-2010-0994  View
468957 43009 CVE-2010-0425 URL:http://www.vupen.com/english/advisories/2010/0994  View
468958 43009 CVE-2010-0425 XF:apache-http-modisapi-ocp-unspecified(56624)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36182 JVNDB-2010-001962 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 複数のレッドハット製品などで利用される libspice は、メモリ管理操作が実行されるアドレスを適切に制限しないため、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2010-0429 43009 6.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001962.html  View