Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2009-2699

Published: 13/10/2009 Updated: 30/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Apache

Vulnerability Summary

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library prior to 1.3.9, as used in the Apache HTTP Server prior to 2.2.14 and other products, does not properly handle errors, which allows remote malicious users to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

apache http_server -

apache http_server 0.8.11

apache http_server 0.8.14

apache http_server 1.0.2

apache http_server 1.0.3

apache http_server 1.0.5

apache http_server 1.1

apache http_server 1.1.1

apache http_server 1.2

apache http_server 1.2.4

apache http_server 1.2.5

apache http_server 1.2.6

apache http_server 1.2.9

apache http_server 1.3

apache http_server 1.3.0

apache http_server 1.3.1

apache http_server 1.3.1.1

apache http_server 1.3.2

apache http_server 1.3.3

apache http_server 1.3.4

apache http_server 1.3.5

apache http_server 1.3.6

apache http_server 1.3.7

apache http_server 1.3.8

apache http_server 1.3.9

apache http_server 1.3.10

apache http_server 1.3.11

apache http_server 1.3.12

apache http_server 1.3.13

apache http_server 1.3.14

apache http_server 1.3.15

apache http_server 1.3.16

apache http_server 1.3.17

apache http_server 1.3.18

apache http_server 1.3.19

apache http_server 1.3.20

apache http_server 1.3.22

apache http_server 1.3.23

apache http_server 1.3.24

apache http_server 1.3.25

apache http_server 1.3.26

apache http_server 1.3.27

apache http_server 1.3.28

apache http_server 1.3.29

apache http_server 1.3.30

apache http_server 1.3.31

apache http_server 1.3.32

apache http_server 1.3.33

apache http_server 1.3.34

apache http_server 1.3.35

apache http_server 1.3.36

apache http_server 1.3.37

apache http_server 1.3.38

apache http_server 1.3.39

apache http_server 1.3.65

apache http_server 1.3.68

apache http_server 1.4.0

apache http_server 1.99

apache http_server 2.0

apache http_server 2.0.9

apache http_server 2.0.28

apache http_server 2.0.32

apache http_server 2.0.34

apache http_server 2.0.35

apache http_server 2.0.36

apache http_server 2.0.37

apache http_server 2.0.38

apache http_server 2.0.39

apache http_server 2.0.40

apache http_server 2.0.41

apache http_server 2.0.42

apache http_server 2.0.43

apache http_server 2.0.44

apache http_server 2.0.45

apache http_server 2.0.46

apache http_server 2.0.47

apache http_server 2.0.48

apache http_server 2.0.49

apache http_server 2.0.50

apache http_server 2.0.51

apache http_server 2.0.52

apache http_server 2.0.53

apache http_server 2.0.54

apache http_server 2.0.55

apache http_server 2.0.56

apache http_server 2.0.57

apache http_server 2.0.58

apache http_server 2.0.59

apache http_server 2.0.60

apache http_server 2.1

apache http_server 2.1.1

apache http_server 2.1.2

apache http_server 2.1.3

apache http_server 2.1.4

apache http_server 2.1.5

apache http_server 2.1.6

apache http_server 2.1.7

apache http_server 2.1.8

apache http_server 2.1.9

apache http_server 2.2

apache http_server 2.2.0

apache http_server 2.2.1

apache http_server 2.2.2

apache http_server 2.2.3

apache http_server 2.2.4

apache http_server 2.2.6

apache http_server 2.2.7

apache http_server 2.2.8

apache http_server 2.2.9

apache http_server 2.2.10

apache http_server 2.2.11

apache http_server 2.2.12

apache http_server

apache apr 0.9.7

apache apr 0.9.17

apache apr 0.9.18

apache apr 1.2.1

apache apr

Github Repositories

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

test

repository ini digunakan untuk belajar

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

References

NVD-CWE-Otherhttp://marc.info/?l=bugtraq&m=133355494609819&w=2http://securitytracker.com/id?1022988http://www.apache.org/dist/httpd/CHANGES_2.2.14http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlhttp://www.securityfocus.com/bid/36596https://exchange.xforce.ibmcloud.com/vulnerabilities/53666https://issues.apache.org/bugzilla/show_bug.cgi?id=47645https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3Ehttps://www.rapid7.com/db/vulnerabilities/apache-httpd-cve-2009-2699http://tools.cisco.com/security/center/viewAlert.x?alertId=19155https://nvd.nist.govhttps://github.com/RoliSoft/ReconScan
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
unprivilegedCVE-2016-8138CVE-2016-8155local file inclusionCVE-2016-8111CVE-2021-27730XML external entityCVE-2021-21973CVE-2021-21972