CVE:CVE-2002-0843
CNNVD:CNNVD-200210-250
Apache 1.3.27之前版本和Apache 2.x 2.0.43之前版本中ApacheBench基准支持程序(ab.c)存在缓冲区溢出漏洞。恶意web服务器可以借助超长回复导致服务拒绝并且可能执行任意代码。
solution:Upgrade apache http_server to a higher version than 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,and avoid the version 1.3,1.3.1,1.3.3,1.3.4,1.3.6,1.3.9,1.3.11,1.3.12,1.3.14,1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26; Upgrade oracle application_server to a higher version than 1.0.2,1.0.2.1s,1.0.2.2,9.0.2,9.0.2:r2,9.0.2.1,and avoid the version 1.0.2,1.0.2.1s,1.0.2.2,9.0.2,9.0.2:r2,9.0.2.1; Upgrade oracle database_server to a higher version than 8.1.7,9.2.2,and avoid the version 8.1.7,9.2.2; Upgrade oracle oracle8i to a higher version than 8.1.7,8.1.7.0.0_enterprise,8.1.7.1,8.1.7.1.0_enterprise,and avoid the version 8.1.7,8.1.7.0.0_enterprise,8.1.7.1,8.1.7.1.0_enterprise