NVD

Id
73330  
Name
CVE-2003-0189  
Description
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2003-06-09  
Modified Date
2017-07-10  
Seq
2003-0189  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377721 73330 CVE-2003-0189 CLA-2003:661  View
377722 73330 CVE-2003-0189 20030528 [SECURITY] [ANNOUNCE] Apache 2.0.46 released  View
377723 73330 CVE-2003-0189 http://www.apache.org/dist/httpd/Announcement2.html  View
377724 73330 CVE-2003-0189 VU#479268  View
377725 73330 CVE-2003-0189 RHSA-2003:186  View
377726 73330 CVE-2003-0189 7725  View
377727 73330 CVE-2003-0189 apache-aprpasswordvalidate-dos(12091)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63427 JVNDB-2003-000153 Apache HTTP Server の認証モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server において、スレッドの取り扱いの不備により、スレッドで動作するサーバ (httpd.worker) を有効化している場合、これらに含まれている基本認証モジュールを介し、Apache HTTP Server の基本認証機能にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2003-0189 7017 CVE-2003-0189 73330 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000153.html 2003-05-27 2007-04-01 View