Vulnerability Description
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Application Server | >= 6.1, < 6.1.0.31 |
| Apache | Http Server | >= 2.0.37, < 2.0.64 |
| Microsoft | Windows | - |
| Ibm | Http Server | 6.0.2 |
| Oracle | Http Server | 10.1.3.5.0 |
| Broadcom | Vmware Ace Management Server | < 2.7.2 |
References
- http://httpd.apache.org/security/vulnerabilities_20.htmlVendor Advisory
- http://httpd.apache.org/security/vulnerabilities_22.htmlVendor Advisory
- http://lists.vmware.com/pipermail/security-announce/2010/000105.htmlBroken Link
- http://secunia.com/advisories/38978Broken Link
- http://secunia.com/advisories/39628Broken Link
- http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrPermissions Required
- http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1Permissions Required
- http://svn.apache.org/viewvc?view=revision&revision=917870Permissions Required
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM09447Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247Third Party Advisory
- http://www.kb.cert.org/vuls/id/280613Third Party AdvisoryUS Government Resource
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.htmlThird Party Advisory
- http://www.securityfocus.com/bid/38494Broken LinkExploit
- http://www.securitytracker.com/id?1023701Broken Link
- http://www.senseofsecurity.com.au/advisories/SOS-10-002Third Party AdvisoryURL Repurposed
FAQ
What is CVE-2010-0425?
CVE-2010-0425 is a vulnerability with a CVSS score of 10.0 (HIGH). modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request process...
How severe is CVE-2010-0425?
CVE-2010-0425 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-0425?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Application Server, Apache Http Server, Microsoft Windows, Ibm Http Server, Oracle Http Server.