Apache x-forwarded-for Denial of Service in mod_rpaf

Strike ID:
E12-5py01
CVSS:
5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
False Positive:
t
Variants:
1
Year:
2012

Description

This strike exploits a denial of service flaw in Apache's mod_rpaf module when presented with an invalid x-forward-for tag. Note that Apache's thread model and restart capabilities may somewhat mask the observable behavior of this exploit.

CVE

Bid