SHARE
CORE IMPACT v10.5 - Exploits Update (Wed Jul 28 2010)
Apache mod_isapi Denial of Service Exploit
Denial of Service/Remote []
• Wed Jul 28 2010
The Apache HTTP Server, commonly referred to as Apache, is a popular open source web server software. mod_isapi is a core module of the Apache package that implements the Internet Server extension API. The extension allows Apache to serve Internet Server extensions (ISAPI .dll modules) for Microsoft Windows based hosts. By sending a specially crafted request followed by a reset packet it is possible to trigger a vulnerability in Apache mod_isapi that will unload the target ISAPI module from memory. However function pointers still remain in memory and are called when published ISAPI functions are referenced. This results in a dangling pointer vulnerability.
Exploits Vulnerabiltiy: CVE-2010-0425