Ubuntu Security Notice (C) 2009-2013 Canonical, Inc. / NASL script (C) 2009-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
USN-802-1 fixed vulnerabilities in Apache. The upstream fix for
CVE-2009-1891 introduced a regression that would cause Apache children
to occasionally segfault when mod_deflate is used. This update fixes
We apologize for the inconvenience.
It was discovered that mod_proxy_http did not properly handle a large
amount of streamed data when used as a reverse proxy. A remote
attacker could exploit this and cause a denial of service via memory
resource consumption. This issue affected Ubuntu 8.04 LTS, 8.10 and
It was discovered that mod_deflate did not abort compressing
large files when the connection was closed. A remote
attacker could exploit this and cause a denial of service
via CPU resource consumption. (CVE-2009-1891).
Update the affected packages.
Risk factor :
High / CVSS Base Score : 7.1
Public Exploit Available : true
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 40655 ()
CVE ID: CVE-2009-1890CVE-2009-1891
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.