A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.

The remote server is running a version of Apache 2.x which is older than 2.0.45.
This version is vulnerable to various flaw :
- There is a denial of service attack which may allow the attacker to disable this server remotely.
- The httpd process leaks file descriptors to child processes such as CGI scripts. An attacker who has the ability to execute arbitrary CGI scripts on this server (include PHP code) would be able to write arbitrary data in the files pointed to (in particular the log files). 

A memory leak was discovered in Apache 2.0 through 2.0.44 that can allow a remote attacker to cause a significant denial of service (DoS) by sending requests containing a lot of linefeed characters to the server.

As well, Apache does not filter terminal escape sequences from its log files, which could make it easy for an attacker to insert those sequences into the error and access logs, which could possibly be viewed by certain terminal emulators with vulnerabilities related to escape sequences.

After upgrading these packages, be sure to restart the httpd server by executing :

service httpd restart

The remote host is running a version of Apache 2.0.x that is prior to 2.0.45. It is, therefore, reportedly affected by multiple vulnerabilities :

  - There is a denial of service attack that could allow an     attacker to disable this server remotely.

  - The httpd process leaks file descriptors to child     processes, such as CGI scripts. An attacker who has the     ability to execute arbitrary CGI scripts on this server     (including PHP code) would be able to write arbitrary     data in the file pointed to (in particular, the log     files).

ID	Name	Product	Family	Severity
1443	Apache < 2.0.46 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
14034	Mandrake Linux Security Advisory : apache2 (MDKSA-2003:050)	Nessus	Mandriva Local Security Checks	medium
11507	Apache 2.0.x < 2.0.45 Multiple Vulnerabilities (DoS, File Write)	Nessus	Web Servers	medium

Detections

Analytics

CVE-2003-0132

high

Tenable Plugins

high

medium

medium