NVD

Id
47372  
Name
CVE-2009-0023  
Description
The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-06-07  
Modified Date
2013-10-10  
Seq
2009-0023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236840 47372 CVE-2009-0023 APPLE-SA-2009-11-09-1  View
236841 47372 CVE-2009-0023 SSRT100345  View
236842 47372 CVE-2009-0023 oval:org.mitre.oval:def:10968  View
236843 47372 CVE-2009-0023 oval:org.mitre.oval:def:12321  View
236844 47372 CVE-2009-0023 GLSA-200907-03  View
236845 47372 CVE-2009-0023 SSA:2009-167-02  View
236846 47372 CVE-2009-0023 http://support.apple.com/kb/HT3937  View
236847 47372 CVE-2009-0023 http://svn.apache.org/viewvc?view=rev&revision=779880  View
236848 47372 CVE-2009-0023 http://wiki.rpath.com/Advisories:rPSA-2009-0144  View
236849 47372 CVE-2009-0023 PK88341  View
236850 47372 CVE-2009-0023 PK91241  View
236851 47372 CVE-2009-0023 PK99478  View
236852 47372 CVE-2009-0023 http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View
236853 47372 CVE-2009-0023 http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3  View
236854 47372 CVE-2009-0023 DSA-1812  View
236855 47372 CVE-2009-0023 MDVSA-2009:131  View
236856 47372 CVE-2009-0023 MDVSA-2013:150  View
236857 47372 CVE-2009-0023 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html  View
236858 47372 CVE-2009-0023 RHSA-2009:1107  View
236859 47372 CVE-2009-0023 RHSA-2009:1108  View
236860 47372 CVE-2009-0023 20091112 rPSA-2009-0144-1 apr-util  View
236861 47372 CVE-2009-0023 35221  View
236862 47372 CVE-2009-0023 USN-786-1  View
236863 47372 CVE-2009-0023 USN-787-1  View
236864 47372 CVE-2009-0023 ADV-2009-1907  View
236865 47372 CVE-2009-0023 ADV-2009-3184  View
236866 47372 CVE-2009-0023 apache-aprstrmatchprecompile-dos(50964)  View
236867 47372 CVE-2009-0023 https://bugzilla.redhat.com/show_bug.cgi?id=503928  View
236868 47372 CVE-2009-0023 FEDORA-2009-6014  View
236869 47372 CVE-2009-0023 FEDORA-2009-6261  View
236870 47372 CVE-2009-0023 FEDORA-2009-5969  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40837 JVNDB-2009-001843 Apache APR-util の apr_strmatch_precompile 関数におけるサービス運用妨害 (DoS) の脆弱性 Apache APR-util の apr_strmatch_precompile 関数には、.htaccess ファイル、SVNMasterURI ディレクティブ、mod_apreq2 モジュール、または libapreq2 ライブラリを使用するアプリケーションの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-0023 37454 CVE-2009-0023 47372 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001843.html 2009-06-08 2013-04-19 View