CVE 설명

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."

CVE 정보

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

EPSS First.org

익스플로잇 정보

Exploit Database EDB-ID : 11650

게시일 : 2010-03-06 23h00 +00:00
저자 : Brett Gervasoni
EDB 검증됨 : Yes

Exploit Database EDB-ID : 14288

게시일 : 2010-07-08 22h00 +00:00
저자 : Brett Gervasoni
EDB 검증됨 : Yes

언급된 제품

구성 0

Ibm>>Websphere_application_server >> Version 부터 (포함) 6.1 까지 (미포함) 6.1.0.31

구성 0

Apache>>Http_server >> Version 부터 (포함) 2.0.37 까지 (미포함) 2.0.64

Apache>>Http_server >> Version 부터 (포함) 2.2.0 까지 (미포함) 2.2.15

Apache>>Http_server >> Version 부터 (포함) 2.3.0 까지 (미포함) 2.3.7

Microsoft>>Windows >> Version -

구성 0

Ibm>>Http_server >> Version 6.0.2

Ibm>>Http_server >> Version 6.0.2.1

Ibm>>Http_server >> Version 6.0.2.3

Ibm>>Http_server >> Version 6.0.2.7

Ibm>>Http_server >> Version 6.0.2.9

Ibm>>Http_server >> Version 6.0.2.11

Ibm>>Http_server >> Version 6.0.2.13

Ibm>>Http_server >> Version 6.0.2.15

Ibm>>Http_server >> Version 6.0.2.19

Ibm>>Http_server >> Version 6.0.2.21

Ibm>>Http_server >> Version 6.0.2.23

Ibm>>Http_server >> Version 6.0.2.25

Ibm>>Http_server >> Version 6.0.2.27

Ibm>>Http_server >> Version 6.0.2.29

Ibm>>Http_server >> Version 6.0.2.31

Ibm>>Http_server >> Version 6.0.2.33

Ibm>>Http_server >> Version 6.0.2.35

Ibm>>Http_server >> Version 6.0.2.37

Ibm>>Http_server >> Version 6.0.2.39

Ibm>>Http_server >> Version 6.1

Ibm>>Http_server >> Version 6.1.0.2

Ibm>>Http_server >> Version 6.1.0.3

Ibm>>Http_server >> Version 6.1.0.5

Ibm>>Http_server >> Version 6.1.0.7

Ibm>>Http_server >> Version 6.1.0.9

Ibm>>Http_server >> Version 6.1.0.11

Ibm>>Http_server >> Version 6.1.0.13

Ibm>>Http_server >> Version 6.1.0.15

Ibm>>Http_server >> Version 6.1.0.17

Ibm>>Http_server >> Version 6.1.0.19

Ibm>>Http_server >> Version 6.1.0.21

Ibm>>Http_server >> Version 6.1.0.23

Ibm>>Http_server >> Version 6.1.0.25

Ibm>>Http_server >> Version 6.1.0.27

Ibm>>Http_server >> Version 6.1.0.29

Microsoft>>Windows >> Version -

구성 0

Oracle>>Http_server >> Version 10.1.3.5.0

구성 0

Broadcom>>Vmware_ace_management_server >> Version 까지 (미포함) 2.7.2

참고 자료

http://www.vmware.com/security/advisories/VMSA-2010-0014.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/39628
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/0634
Tags : vdb-entry, x_refsource_VUPEN

http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247
Tags : vendor-advisory, x_refsource_AIXAPAR

http://www.securitytracker.com/id?1023701
Tags : vdb-entry, x_refsource_SECTRACK

http://www.securityfocus.com/bid/38494
Tags : vdb-entry, x_refsource_BID

http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
Tags : x_refsource_CONFIRM

http://www-01.ibm.com/support/docview.wss?uid=swg1PM09447
Tags : vendor-advisory, x_refsource_AIXAPAR

http://httpd.apache.org/security/vulnerabilities_20.html
Tags : x_refsource_CONFIRM

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870
Tags : x_refsource_CONFIRM

http://www.kb.cert.org/vuls/id/280613
Tags : third-party-advisory, x_refsource_CERT-VN

http://secunia.com/advisories/38978
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.vmware.com/pipermail/security-announce/2010/000105.html
Tags : mailing-list, x_refsource_MLIST

http://httpd.apache.org/security/vulnerabilities_22.html
Tags : x_refsource_CONFIRM

http://svn.apache.org/viewvc?view=revision&revision=917870
Tags : x_refsource_CONFIRM

http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870
Tags : x_refsource_CONFIRM

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8439
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.senseofsecurity.com.au/advisories/SOS-10-002
Tags : x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/56624
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2010/0994
Tags : vdb-entry, x_refsource_VUPEN

https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://www.exploit-db.com/exploits/11650
Tags : x_refsource_MISC

https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
Tags : mailing-list, x_refsource_MLIST

날짜	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	83.98%	–	–
2023-03-12	–	–	–	97.41%	–
2023-03-26	–	–	–	97.23%	–
2023-05-07	–	–	–	97.37%	–
2023-06-25	–	–	–	97.38%	–
2023-08-06	–	–	–	97.41%	–
2023-09-17	–	–	–	97.42%	–
2023-10-29	–	–	–	97.03%	–
2023-11-12	–	–	–	96.98%	–
2023-12-10	–	–	–	97.08%	–
2024-01-28	–	–	–	97.1%	–
2024-02-11	–	–	–	97.08%	–
2024-03-10	–	–	–	97.27%	–
2024-06-02	–	–	–	97.25%	–
2024-06-08	–	–	–	97.31%	–
2024-09-08	–	–	–	97.08%	–
2024-10-13	–	–	–	96.99%	–
2024-11-24	–	–	–	97.04%	–
2024-12-22	–	–	–	97.16%	–
2025-01-19	–	–	–	97.16%	–
2025-02-09	–	–	–	97.13%	–
2025-02-16	–	–	–	97.13%	–
2025-03-18	–	–	–	–	87.6%
2025-05-01	–	–	–	–	85.7%
2025-05-04	–	–	–	–	87.6%
2025-06-01	–	–	–	–	85.7%
2025-06-04	–	–	–	–	87.6%
2025-07-01	–	–	–	–	85.7%
2025-07-04	–	–	–	–	87.6%
2025-07-26	–	–	–	–	86.82%
2025-07-30	–	–	–	–	87.45%
2025-08-01	–	–	–	–	85.46%
2025-08-04	–	–	–	–	87.45%
2025-10-01	–	–	–	–	85.77%
2025-10-04	–	–	–	–	86.82%
2025-10-27	–	–	–	–	87.45%
2025-10-28	–	–	–	–	86.82%
2025-11-01	–	–	–	–	85.77%
2025-11-04	–	–	–	–	86.82%
2025-11-18	–	–	–	–	86.82%
2025-11-21	–	–	–	–	86.82%
2025-12-01	–	–	–	–	85.77%
2025-12-04	–	–	–	–	86.82%
2025-12-27	–	–	–	–	87.45%
2025-12-28	–	–	–	–	86.82%
2026-01-01	–	–	–	–	85.77%
2026-01-04	–	–	–	–	86.82%
2026-03-01	–	–	–	–	85.77%
2026-03-08	–	–	–	–	86.82%

날짜	백분위수
2022-02-06	1%
2023-03-12	1%
2023-03-26	1%
2023-05-07	1%
2023-06-25	1%
2023-08-06	1%
2023-09-17	1%
2023-10-29	1%
2023-11-12	1%
2023-12-10	1%
2024-01-28	1%
2024-02-11	1%
2024-03-10	1%
2024-06-02	1%
2024-06-08	1%
2024-09-08	1%
2024-10-13	1%
2024-11-24	1%
2024-12-22	1%
2025-01-19	1%
2025-02-09	1%
2025-02-16	1%
2025-03-18	99%
2025-05-01	99%
2025-05-04	99%
2025-06-01	99%
2025-06-04	99%
2025-07-01	99%
2025-07-04	99%
2025-07-26	99%
2025-07-30	99%
2025-08-01	99%
2025-08-04	99%
2025-10-01	99%
2025-10-04	99%
2025-10-27	99%
2025-10-28	99%
2025-11-01	99%
2025-11-04	99%
2025-11-18	1%
2025-11-21	99%
2025-12-01	99%
2025-12-04	99%
2025-12-27	99%
2025-12-28	99%
2026-01-01	99%
2026-01-04	99%
2026-03-01	99%
2026-03-08	99%

CVE-2010-0425

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 11650

Exploit Database EDB-ID : 14288

언급된 제품

구성 0

구성 0

구성 0

구성 0

구성 0

참고 자료

CVE-2010-0425 : 상세 정보

CVE-2010-0425

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 11650

Exploit Database EDB-ID : 14288

언급된 제품

구성 0

구성 0

구성 0

구성 0

구성 0

참고 자료