CVE-2009-3094

Description

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.

Affected Platforms

Weakness Type

CWE-476

References

• http://intevydis.com/vd-list.shtml
• http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
• http://marc.info/?l=bugtraq&m=126998684522511&w=2
• http://marc.info/?l=bugtraq&m=127557640302499&w=2
• http://marc.info/?l=bugtraq&m=133355494609819&w=2
• http://secunia.com/advisories/36549