NVD

Id
11981  
Name
CVE-2010-0425  
Description
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-03-05  
Modified Date
2013-07-17  
Seq
2010-0425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66045 11981 CVE-2010-0425 http://httpd.apache.org/security/vulnerabilities_20.html  View
66046 11981 CVE-2010-0425 http://httpd.apache.org/security/vulnerabilities_22.html  View
66047 11981 CVE-2010-0425 [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues  View
66048 11981 CVE-2010-0425 oval:org.mitre.oval:def:8439  View
66049 11981 CVE-2010-0425 http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870  View
66050 11981 CVE-2010-0425 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870  View
66051 11981 CVE-2010-0425 http://svn.apache.org/viewvc?view=revision&revision=917870  View
66052 11981 CVE-2010-0425 PM09447  View
66053 11981 CVE-2010-0425 PM12247  View
66054 11981 CVE-2010-0425 VU#280613  View
66055 11981 CVE-2010-0425 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
66056 11981 CVE-2010-0425 38494  View
66057 11981 CVE-2010-0425 1023701  View
66058 11981 CVE-2010-0425 http://www.senseofsecurity.com.au/advisories/SOS-10-002  View
66059 11981 CVE-2010-0425 http://www.vmware.com/security/advisories/VMSA-2010-0014.html  View
66060 11981 CVE-2010-0425 ADV-2010-0634  View
66061 11981 CVE-2010-0425 ADV-2010-0994  View
66062 11981 CVE-2010-0425 apache-http-modisapi-ocp-unspecified(56624)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35379 JVNDB-2010-001159 Apache HTTP Server の mod_isapi における脆弱性 Windows 上で稼働する Apache HTTP Server の mod_isapi の modules/arch/win32/mod_isapi.c には、リクエストの処理が完了する前に ISAPI .dll モジュールの isapi_unload を呼び出す可能性があるため、詳細不明な脆弱性が存在します。 CVE-2010-0425 43005 CVE-2010-0425 11981 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001159.html 2010-03-05 2013-07-18 View