CVE-2003-0254

Description

Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.

How to fix CVE-2003-0254

To remediate CVE-2003-0254, upgrade the affected package to a fixed version below.

• Debian/apache2—upgrade to 2.0.47 or later

Is CVE-2003-0254 being exploited?

Moderate — EPSS is 8.2%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 2.0.47

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0254