System	Score	Found at
apache_httpd	important

Reference id	Reference type	URL
CVE-2010-0425		https://httpd.apache.org/security/json/CVE-2010-0425.json

Data source	Exploit-DB
Date added	March 6, 2010
Description	Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM
Ransomware campaign use	Known
Source publication date	March 7, 2010
Exploit type	remote
Platform	windows
Source update date	Jan. 31, 2017
Source URL	http://www.senseofsecurity.com.au/advisories/SOS-10-002

Data source	Metasploit
Description	This module triggers a use-after-free vulnerability in the Apache Software Foundation mod_isapi extension for versions 2.2.14 and earlier. In order to reach the vulnerable code, the target server must have an ISAPI module installed and configured. By making a request that terminates abnormally (either an aborted TCP connection or an unsatisfied chunked request), mod_isapi will unload the ISAPI extension. Later, if another request comes for that ISAPI module, previously obtained pointers will be used resulting in an access violation or potentially arbitrary code execution. Although arbitrary code execution is theoretically possible, a real-world method of invoking this consequence has not been proven. In order to do so, one would need to find a situation where a particular ISAPI module loads at an image base address that can be re-allocated by a remote attacker. Limited success was encountered using two separate ISAPI modules. In this scenario, a second ISAPI module was loaded into the same memory area as the previously unloaded module.
Note	Stability: - crash-service-down SideEffects: [] Reliability: []
Ransomware campaign use	Unknown
Source publication date	March 5, 2010
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/apache_mod_isapi.rb

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.