Apache HTTP Server mod_log_config DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Apache Group Apache HTTP Server 2.2.x
Unaffected system:
Apache Group Apache HTTP Server 2.2.22-dev
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51705
Cve id: CVE-2012-0021

Apache HTTP Server is an open-source Web Server of the Apache Software Foundation and can be run in most computer operating systems.

The mod_log_config module of Apache HTTP Server has a Denial-of-Service vulnerability. After successful exploitation, DOS can be caused.

<* Source: Apache

Link: http://httpd.apache.org/security/vulnerabilities_22.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apache Group
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://httpd.apache.org/