Apache mod_python module malformed query Remote Denial of Service Attack Vulnerability

Information provision:	Provide hotline: 51cto.editor@gmail.com
Vulnerability category:	Design Error
Attack type:	Denial of Service Attack
Release date:	2003-11-29
Updated on:	2003-12-04
Affected Systems:	Gregory Trubetskoy mod_python 3.0.3 Gregory Trubetskoy mod_python 3.0.2 Gregory Trubetskoy mod_python 3.0.1 Gregory Trubetskoy mod_python 3.0 Gregory Trubetskoy mod_python 2.7.8 Gregory Trubetskoy mod_python 2.7.7 Gregory Trubetskoy mod_python 2.7.5 Gregory Trubetskoy mod_python 2.7.4 Gregory Trubetskoy mod_python 2.7.3 Gregory Trubetskoy mod_python 2.7.2 Gregory Trubetskoy mod_python 2.7.1 Gregory Trubetskoy mod_python 2.7 Gregory Trubetskoy mod_python 2.7.6 -Conectiva Linux 8.0 -FreeBSD 4.5 -FreeBSD 4.4 -FreeBSD 4.3 -FreeBSD 4.2 -FreeBSD 4.1.1 -RedHat: Linux 7.2
Security system:	Gregory Trubetskoy mod_python 3.0.4 Gregory Trubetskoy mod_python 2.7.9
Vulnerability Reporter:	Apache
Vulnerability description:	Bugtraq id: 9129 Apache is a popular WEB service program. Some of Apache's Mod_python versions have problems in processing malformed queries. Remote attackers can exploit this vulnerability to launch DoS attacks. No details are provided currently.
Test method:	None
Solution:	Vendor patch: Gregory Trubetskoy ------------------ The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage: Apache Software Foundation Upgrade mod_python 2.7.9 Http://httpd.apache.org/modules/python-download.cgi Apache Software Foundation Upgrade mod_python 3.0.4 Http://httpd.apache.org/modules/python-download.cgi