Unknown
CVE-2010-0010
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)Unknown
(0 users assessed)Unknown
Unknown
Unknown
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- http server,
- http server 0.8.11,
- http server 0.8.14,
- http server 1.0,
- http server 1.0.3,
- http server 1.0.5,
- http server 1.1,
- http server 1.2,
- http server 1.2.4,
- http server 1.2.5,
- http server 1.2.6,
- http server 1.3,
- http server 1.3.0,
- http server 1.3.1,
- http server 1.3.10,
- http server 1.3.11,
- http server 1.3.12,
- http server 1.3.13,
- http server 1.3.14,
- http server 1.3.15,
- http server 1.3.17,
- http server 1.3.18,
- http server 1.3.19,
- http server 1.3.2,
- http server 1.3.20,
- http server 1.3.22,
- http server 1.3.23,
- http server 1.3.24,
- http server 1.3.25,
- http server 1.3.26,
- http server 1.3.27,
- http server 1.3.28,
- http server 1.3.29,
- http server 1.3.3,
- http server 1.3.30,
- http server 1.3.31,
- http server 1.3.32,
- http server 1.3.33,
- http server 1.3.34,
- http server 1.3.35,
- http server 1.3.36,
- http server 1.3.37,
- http server 1.3.38,
- http server 1.3.39,
- http server 1.3.4,
- http server 1.3.40
References
Advisory
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: