IBM HTTP Server Denial-of-Service Vulnerability in mod_fastcgi

A denial-of-service vulnerability has been identified in IBM HTTP Server versions 8.5 and 9.0. The issue arises in the optional mod_fastcgi module, which can be exploited to disrupt normal service operations.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or unavailable.

Remediation

Users are advised to upgrade to IBM HTTP Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. For both versions, the Interim Fix that resolves APAR PH71265 can be applied. Additional interim fixes may be available.