Apache – CVE-2009-1955

Description

Kayran has detected that the version of Apache APR-util being used has a flaw that could lead to a denial of service (DoS) attack.
The issue exists in the expat XML parser in the apr_xml_* interface in xml/apr_xml.c, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server. The issue presented in CVE-2009-1955 is similar to CVE-2003-1564.

A remote attacker could create a specially-crafted XML document that would cause excessive memory consumption (hence the denial of service) when processed by the XML decoding engine.
Demonstrated by a PROPFIND request.

This will cause a decrease in performance and also for interruptions in the availability of resources.

Severity/Score

CVSS Version 2.0 – 5.0 Medium

Recommendation

To fix CVE-2009-1955, upgrade the version of Apache Server being used to 2.2.12.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955

< Return to all Vulnerabilities

Explaining API

We’ve talked about API’s Vulnerability in here, but i feel like there’s much more to talk about and explain since this is a big and

Read More »

HTTP VS. HTTPS

You must have once wondered what HTTP means and what is the difference between that ugly word to HTTPS, and if not, then please read

Read More »

The Cloud

I’m pretty sure there isn’t a single adult in the world who hasn’t at least heard of The Cloud. Explaining “The Cloud” in 2022 may

Read More »