CVE

Id
7018  
CVE No.
CVE-2003-0189  
Status
Candidate  
Description
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.  
Phase
Assigned (20030401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40937 7018 CVE-2003-0189 CONFIRM:http://www.apache.org/dist/httpd/Announcement2.html  View
40938 7018 CVE-2003-0189 BUGTRAQ:20030528 [SECURITY] [ANNOUNCE] Apache 2.0.46 released  View
40939 7018 CVE-2003-0189 URL:http://marc.info/?l=bugtraq&m=105418115512559&w=2  View
40940 7018 CVE-2003-0189 REDHAT:RHSA-2003:186  View
40941 7018 CVE-2003-0189 URL:http://www.redhat.com/support/errata/RHSA-2003-186.html  View
40942 7018 CVE-2003-0189 CONECTIVA:CLA-2003:661  View
40943 7018 CVE-2003-0189 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000661  View
40944 7018 CVE-2003-0189 CERT-VN:VU#479268  View
40945 7018 CVE-2003-0189 URL:http://www.kb.cert.org/vuls/id/479268  View
40946 7018 CVE-2003-0189 BID:7725  View
40947 7018 CVE-2003-0189 URL:http://www.securityfocus.com/bid/7725  View
40948 7018 CVE-2003-0189 SECUNIA:8881  View
40949 7018 CVE-2003-0189 URL:http://secunia.com/advisories/8881  View
40950 7018 CVE-2003-0189 XF:apache-aprpasswordvalidate-dos(12091)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63410 JVNDB-2003-000136 OpenSSH の PAM 認証におけるタイミング攻撃を受ける脆弱性 Portable 版 OpenSSH において、この設定が特定の PAM の実装と組み合わされて有効化されている場合、OpenSSH は認証に失敗する際に、存在するユーザ名と存在していないユーザ名に応じて認証結果 "Permission denied, please try again." を返すまでの時間に差が出てしまう脆弱性が存在します。 CVE-2003-0190 7018 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000136.html  View