Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2009-2699

Published: 13/10/2009 Updated: 06/06/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Http Server

Vulnerability Summary

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library prior to 1.3.9, as used in the Apache HTTP Server prior to 2.2.14 and other products, does not properly handle errors, which allows remote malicious users to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache http_server 2.2.4

apache http_server -

apache http_server 2.2.0

apache http_server 2.2

apache http_server 1.1

apache http_server 1.1.1

apache http_server 1.3.0

apache http_server 1.3.1

apache http_server 1.3.15

apache http_server 1.3.16

apache http_server 1.3.24

apache http_server 1.3.25

apache http_server 1.3.31

apache http_server 1.3.32

apache http_server 1.3.39

apache http_server 1.3.4

apache http_server 1.4.0

apache http_server 1.99

apache http_server 2.0.36

apache http_server 2.0.37

apache http_server 2.0.44

apache http_server 2.0.45

apache http_server 2.0.53

apache http_server 2.0.54

apache http_server 2.0.9

apache http_server 2.1

apache http_server 2.1.7

apache http_server

apache http_server 2.2.8

apache http_server 2.2.9

apache http_server 0.8.11

apache http_server 0.8.14

apache http_server 1.2.5

apache http_server 1.2.6

apache http_server 1.3.11

apache http_server 1.3.12

apache http_server 1.3.19

apache http_server 1.3.2

apache http_server 1.3.20

apache http_server 1.3.28

apache http_server 1.3.29

apache http_server 1.3.35

apache http_server 1.3.36

apache http_server 1.3.68

apache http_server 1.3.7

apache http_server 2.0.32

apache http_server 2.0.40

apache http_server 2.0.41

apache http_server 2.0.49

apache http_server 2.0.50

apache http_server 2.0.57

apache http_server 2.0.58

apache http_server 2.1.3

apache http_server 2.1.4

apache http_server 2.2.2

apache http_server 2.2.3

apache http_server 2.2.10

apache http_server 2.2.1

apache http_server 1.0.2

apache http_server 1.0.3

apache http_server 1.0.5

apache http_server 1.2.9

apache http_server 1.3

apache http_server 1.3.13

apache http_server 1.3.14

apache http_server 1.3.22

apache http_server 1.3.23

apache http_server 1.3.3

apache http_server 1.3.30

apache http_server 1.3.37

apache http_server 1.3.38

apache http_server 1.3.8

apache http_server 1.3.9

apache http_server 2.0.34

apache http_server 2.0.35

apache http_server 2.0.42

apache http_server 2.0.43

apache http_server 2.0.51

apache http_server 2.0.52

apache http_server 2.0.59

apache http_server 2.0.60

apache http_server 2.1.5

apache http_server 2.1.6

apache http_server 2.1.8

apache http_server 2.1.9

apache http_server 2.2.6

apache http_server 2.2.7

apache http_server 2.2.11

apache http_server 2.2.12

apache http_server 1.2

apache http_server 1.2.4

apache http_server 1.3.1.1

apache http_server 1.3.10

apache http_server 1.3.17

apache http_server 1.3.18

apache http_server 1.3.26

apache http_server 1.3.27

apache http_server 1.3.33

apache http_server 1.3.34

apache http_server 1.3.5

apache http_server 1.3.6

apache http_server 1.3.65

apache http_server 2.0

apache http_server 2.0.28

apache http_server 2.0.38

apache http_server 2.0.39

apache http_server 2.0.46

apache http_server 2.0.47

apache http_server 2.0.48

apache http_server 2.0.55

apache http_server 2.0.56

apache http_server 2.1.1

apache http_server 2.1.2

apache apr 0.9.18

apache apr 0.9.7

apache apr 1.2.1

apache apr

apache apr 0.9.17

Github Repositories

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

ReconScan

Network reconnaissance and vulnerability assessment tools.

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

test

repository ini digunakan untuk belajar

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets The project currently consists of two major components: a script invoking and aggregating the results of existing tools, and a second script for automated analysis of the aforementioned results from

Strike A python tool to quickly analyze all IPs and see which ones have open ports and vulnerabilities Installation apt-get install python3 git clone githubcom/SecureAxom/strike cd strike pip3 install -r requirementstxt python3 strikepy Usages python3 strikepy -h python3 strikepy -t 20891

References

NVD-CWE-Otherhttp://www.securityfocus.com/bid/36596http://www.apache.org/dist/httpd/CHANGES_2.2.14http://securitytracker.com/id?1022988https://issues.apache.org/bugzilla/show_bug.cgi?id=47645http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://marc.info/?l=bugtraq&m=133355494609819&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/53666https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d@%3Ccvs.httpd.apache.org%3Ehttps://www.securityfocus.com/bid/36596http://tools.cisco.com/security/center/viewAlert.x?alertId=19155https://nvd.nist.govhttps://github.com/GiJ03/ReconScan
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-29484cross-site scriptingarbitrary CVE-2022-32049CVE-2022-24342CVE-2022-32082CVE-2022-29471elevation of privilegeCVE-2022-26766
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook