Description

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.

Remediation

References

CVE-2009-3094

Related Vulnerabilities

WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)

WordPress Plugin Gallery-Video Gallery and Youtube Gallery Cross-Site Scripting (1.7.01)

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20239)

Drupal Core 9.0.x Security Bypass (9.0.0 - 9.0.5)

WordPress Plugin Chained Quiz Multiple Cross-Site Scripting Vulnerabilities (0.9.8)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-476 CVE-2009-3094