Title: Apache HTTP Server mod_proxy Module mod_proxy_http.c stream_reqbody_cl Function CPU Consumption DoS

Unknown or Incomplete

• CVE ID: 2009-1890 (see also: NVD)
• Secunia Advisory ID: 35691 35721 35793 35813 35865 36545 36619 37152 37313 41884 42514
• Bugtraq ID: 36254
• Other Advisory URL: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_the_apache
• Vendor Specific News/Changelog Entry: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02579879
  http://lists.debian.org/debian-security-announce/2009/msg00148.html
  http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
  http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587
  http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?revision=790587
  http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=790587&r2=790586&pathrev=790587
  http://svn.apache.org/viewvc?view=rev&revision=790587
  https://lists.ubuntu.com/archives/ubuntu-security-announce/2009-July/000931.html
  https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html
• Vendor Specific Advisory URL: http://support.apple.com/kb/HT3937
  http://www-01.ibm.com/support/docview.wss?uid=swg24023947
  http://www.gentoo.org/security/en/glsa/glsa-200907-04.xml
• News Article: http://www.scmagazineus.com/Apple-distributes-whopper-of-security-update/article/157531/
• RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2009-1148.html

Unknown or Incomplete