Signature Detail
Short Name |
HTTP:APACHE:PHP-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Apache Multipart Form-Data Denial of Service |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Apache Multipart Form-Data Denial of Service
This signature detects attempts to exploit a known vulnerability against the Apache daemon with PHP support. Apache 1.3.x with php_4.0.6 is vulnerable. Attackers can send a multipart/form-data POST request to crash the Apache daemon process.
Extended Description
A vulnerability has been reported for PHP versions 4.2.0 and 4.2.1. It is possible for a remote attacker to cause the PHP interpreter to crash the web server on a vulnerable system and execute malicious, attacker supplied code. The vulnerability is the result of the PHP interpreter incorrectly parsing MIME headers when HTTP POST commands are received. When PHP receives a malformed POST request, it generates an error condition that is improperly handled. As a result, the attacker may cause the web server to crash and possibly execute supplied code.
Affected Products
- PHP 4.2.0 .0
- PHP 4.2.1
References