NVD Vulnerability Detail

CVE-2009-2412

Summary	Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Publication Date	Aug. 7, 2009, 12:30 a.m.
Registration Date	Jan. 29, 2021, 1:20 p.m.
Last Update	Nov. 7, 2023, 11:04 a.m.

CVSS2.0 : HIGH
Score	10.0
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:apr-util:1.3.6-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.6-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.7:::::::*
cpe:2.3:a:apache:apr-util:1.3.6:::::::*
cpe:2.3:a:apache:apr-util:0.9.2-dev:::::::*
cpe:2.3:a:apache:apr-util:1.3.3:::::::*
cpe:2.3:a:apache:apr-util:0.9.9:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.7-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.3:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.6:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.16-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.8:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.1:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.2:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.4:::::::*
cpe:2.3:a:apache:apr-util:1.3.0:::::::*
cpe:2.3:a:apache:apr-util:1.3.4:::::::*
cpe:2.3:a:apache:apr-util:0.9.4:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.4:::::::*
cpe:2.3:a:apache:apr-util:0.9.3:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.3:::::::*
cpe:2.3:a:apache:apr-util:0.9.7-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.1:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.3-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.8:::::::*
cpe:2.3:a:apache:apr-util:0.9.1:::::::*
cpe:2.3:a:apache:apr-util:0.9.6:::::::*
cpe:2.3:a:apache:apr-util:1.3.1:::::::*
cpe:2.3:a:apache:apr-util:1.3.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.2:::::::*
cpe:2.3:a:apache:apr-util:1.3.2:::::::*
cpe:2.3:a:apache:apr-util:1.3.4-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.7:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.2-dev:::::::*
cpe:2.3:a:apache:apr-util:1.3.7:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.2:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.6:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.9:::::::*
cpe:2.3:a:apache:apr-util:0.9.8:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.16:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.3-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.4-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.0:::::::*
cpe:2.3:a:apache:apr-util:1.3.8:::::::*
cpe:2.3:a:apache:apr-util:0.9.5:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736	CONFIRM
2	http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup	CONFIRM
3	http://secunia.com/advisories/36138	SECUNIA	Vendor Advisory
4	http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup	CONFIRM	Exploit
5	http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733	CONFIRM	Exploit
6	http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup	CONFIRM	Exploit
7	http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735	CONFIRM
8	http://www.securityfocus.com/bid/35949	BID	Patch
9	http://secunia.com/advisories/36140	SECUNIA	Vendor Advisory
10	http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup	CONFIRM
11	http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732	CONFIRM
12	http://www.mandriva.com/security/advisories?name=MDVSA-2009:195	MANDRIVA
13	http://osvdb.org/56766	OSVDB
14	http://osvdb.org/56765	OSVDB
15	http://www.ubuntu.com/usn/usn-813-2	UBUNTU
16	http://secunia.com/advisories/36166	SECUNIA
17	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00353.html	FEDORA
18	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00320.html	FEDORA
19	http://secunia.com/advisories/36233	SECUNIA
20	http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html	SUSE
21	http://secunia.com/advisories/37152	SECUNIA
22	http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html	APPLE
23	http://support.apple.com/kb/HT3937	CONFIRM
24	http://www.vupen.com/english/advisories/2009/3184	VUPEN
25	http://secunia.com/advisories/37221	SECUNIA
26	http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225	AIXAPAR
27	http://www-01.ibm.com/support/docview.wss?uid=swg1PK99482	AIXAPAR
28	http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html	SUSE
29	http://www.vupen.com/english/advisories/2010/1107	VUPEN
30	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9958	OVAL
31	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8394	OVAL
32	https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E	MISC
33	https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E	MISC
34	https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E	MISC
35	https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E	MISC
36	https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E	MISC
37	https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E	MISC
38	https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E	MISC
39	https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E	MISC
40	https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E	MISC
41	https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E	MISC
42	https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E	MISC
43	https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E	MISC
44	https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E	MISC
45	https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E	MISC
46	https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E	MISC
47	https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E	MISC
48	https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E	MISC
49	https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E	MISC
50	https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E	MISC
51	https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E	MISC

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

JVN Vulnerability Information

APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性

Title	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性
Summary	Apache Portable Runtime (APR) ライブラリ、および Apache Portable Utility ライブラリ (APR-util) には、整数オーバーフローの脆弱性が存在します。
Possible impacts	第三者にサービス運用妨害 (DoS) 状態にされる、あるいは任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 6, 2009, midnight
Registration Date	Sept. 17, 2009, 12:04 p.m.
Last Update	Nov. 24, 2011, 10:57 a.m.

Affected System

レッドハット

Red Hat Enterprise Linux 3 (as)

Red Hat Enterprise Linux 3 (es)

Red Hat Enterprise Linux 3 (ws)

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 4.8 (as)

Red Hat Enterprise Linux 4.8 (es)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 3.0

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 5.0 (client)

Red Hat Enterprise Linux EUS 5.3.z (server)

RHEL Desktop Workstation 5 (client)

Apache Software Foundation

Apache HTTP Server 2.0.64 未満

Apache Portable Runtime 0.9.x

Apache Portable Runtime 1.3.x

APR-util 0.9.x

APR-util 1.3.x

トレンドマイクロ

InterScan Messaging Security Suite 7.x

InterScan Messaging Security Virtual Appliance 7.0

TrendMicro InterScan Messaging Security Appliance 7.0

オラクル

OpenSolaris

Oracle Solaris 10

IBM

IBM HTTP Server 2.0.47.x

IBM HTTP Server 6.0.2.39

IBM HTTP Server 6.1.0.29

IBM HTTP Server 7.0.0.7

IBM WebSphere Application Server 6.0.2.39

IBM WebSphere Application Server 6.1.0.29

IBM WebSphere Application Server 7.0.0.7

ターボリナックス

Turbolinux Appliance Server 3.0

Turbolinux Appliance Server 3.0 (x64)

Turbolinux Appliance Server 2.0

Turbolinux Client 2008

Turbolinux FUJI (延長メンテナンス)

Turbolinux Server 10

Turbolinux Server 10 (x64)

Turbolinux Server 11

Turbolinux Server 11 (x64)

サイバートラスト株式会社

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

Asianux Server 3.0

Asianux Server 3.0 (x86-64)

Asianux Server 4.0

Asianux Server 4.0 (x86-64)

アップル

Apple Mac OS X v10.5.8

Apple Mac OS X v10.6

Apple Mac OS X v10.6.1

Apple Mac OS X Server v10.5.8

Apple Mac OS X Server v10.6

Apple Mac OS X Server v10.6.1

富士通

Interstage Application Server

Interstage Studio

Interstage Web Server

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2009-2412	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412
National Vulnerability Database (NVD)
2	CVE-2009-2412	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2412

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
Apache httpd 2.0 vulnerabilities
1	Fixed in Apache httpd 2.0.64	http://httpd.apache.org/security/vulnerabilities_20.html#2.0.64
Apache Released
2	Apache 2.2.13 Released	http://httpd.apache.org/#2.2.13
Apache Software Foundation
3	0.9.x/CHANGES	http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup
4	1.3.x/CHANGES	http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup
Apple Security Updates
5	HT3937	http://support.apple.com/kb/HT3937
Apple セキュリティアップデート
6	HT3937	http://support.apple.com/kb/HT3937?viewlocale=ja_JP
Asianux Technical Support Network
7	apr-1.2.7-11AXS3.1	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=730
8	apr-util-1.2.7-7AXS3.2	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=731
IBM Support Document
9	7006876	http://www-01.ibm.com/support/docview.wss?uid=swg27006876##60239
10	7007033	http://www-01.ibm.com/support/docview.wss?uid=swg27007033#60239
11	7007951	http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg27007951#61029
12	7008517	http://www-01.ibm.com/support/docview.wss?rs=177&uid=swg27008517#61029
13	7014463	http://www-01.ibm.com/support/docview.wss?uid=swg27014463#7007
14	7014506	http://www-01.ibm.com/support/docview.wss?uid=swg27014506#7007
15	PK93225	http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225&loc=en_US
16	PM10658	http://www-01.ibm.com/support/docview.wss?uid=swg1PM10658
MIRACLE LINUX アップデート情報
17	1761	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1761
18	1768	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1768
19	1769	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1769
Red Hat Security Advisory
20	RHSA-2009:1204	https://rhn.redhat.com/errata/RHSA-2009-1204.html
21	RHSA-2009:1205	https://rhn.redhat.com/errata/RHSA-2009-1205.html
SECURITY BLOG
22	cve_2010_0740_record_of	http://blogs.oracle.com/sunsecurity/entry/cve_2010_0740_record_of
Trend Micro ReadMe Documentation
23	readme_imss70_lin_criticalpatch_b33791	http://www.trendmicro.com/ftp/jp/ucmodule/imss/lin/70/readme_imss70_lin_criticalpatch_b33791.txt
24	readme_imss70_sol_criticalpatch_b81651	http://www.trendmicro.com/ftp/jp/ucmodule/imss/sol/70/readme_imss70_sol_criticalpatch_b81651.txt
25	readme_imss70_win_criticalpatch_b63681	http://www.trendmicro.com/ftp/jp/ucmodule/imss/win/70/readme_imss70_win_criticalpatch_b63681.txt
26	readme_imss71_lin_criticalpatch_b12531	http://www.trendmicro.com/ftp/jp/ucmodule/imss/lin/71/readme_imss71_lin_criticalpatch_b12531.txt
Turbolinux Security Advisory
27	TLSA-2010-30	http://www.turbolinux.co.jp/security/2010/TLSA-2010-30j.txt
トレンドマイクロサポート情報
28	JP-2076110	http://esupport.trendmicro.co.jp/Pages/JP-2076110.aspx
レッドハットセキュリティーアップデート
29	RHSA-2009:1204	https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1204J.html
30	RHSA-2009:1205	https://www.jp.redhat.com/support/errata/RHSA/RHSA-2009-1205J.html
富士通セキュリティ情報
31	interstage_as_201103	http://software.fujitsu.com/jp/security/products-fujitsu/solution/interstage_as_201103.html

その他

No	Name	URL
OPEN SOURCE VULNERABILITY DATABASE (OSVDB)
1	56765	http://osvdb.org/56765
2	56766	http://osvdb.org/56766
Secunia Advisory
3	SA36138	http://secunia.com/advisories/36138
4	SA36140	http://secunia.com/advisories/36140
SecurityFocus
5	35949	http://www.securityfocus.com/bid/35949

Change Log

No	Changed Details	Date of change
0	[2009年09月17日] 掲載 [2009年11月06日] 影響を受けるシステム：IBM (PK93225) の情報を追加ベンダ情報：IBM (PK93225) を追加 [2009年12月21日] 影響を受けるシステム：IBM (7014463) の情報を追加影響を受けるシステム：IBM (7006876) の情報を追加影響を受けるシステム：アップル (HT3937) の情報を追加ベンダ情報：IBM (7014506) を追加ベンダ情報：IBM (7014463) を追加ベンダ情報：IBM (7007033) を追加ベンダ情報：IBM (7006876) を追加ベンダ情報：アップル (HT3937) を追加 [2010年02月05日] 影響を受けるシステム：IBM (7007951) の情報を追加影響を受けるシステム：トレンドマイクロ (readme_imss71_lin_criticalpatch_b12531) の情報を追加影響を受けるシステム：トレンドマイクロ (readme_imss70_lin_criticalpatch_b33791) の情報を追加影響を受けるシステム：トレンドマイクロ (readme_imss70_sol_criticalpatch_b81651) の情報を追加影響を受けるシステム：トレンドマイクロ (readme_imss70_win_criticalpatch_b63681) の情報を追加影響を受けるシステム：トレンドマイクロ (JP-2076110) の情報を追加ベンダ情報：IBM (7007951) を追加ベンダ情報：IBM (7008517) を追加ベンダ情報：トレンドマイクロ (readme_imss71_lin_criticalpatch_b12531) を追加ベンダ情報：トレンドマイクロ (readme_imss70_lin_criticalpatch_b33791) を追加ベンダ情報：トレンドマイクロ (readme_imss70_sol_criticalpatch_b81651) を追加ベンダ情報：トレンドマイクロ (readme_imss70_win_criticalpatch_b63681) を追加ベンダ情報：トレンドマイクロ (JP-2076110) を追加 [2010年04月28日] 影響を受けるシステム：IBM (PM10658) の情報を追加ベンダ情報：IBM (PM10658) を追加 [2010年08月02日] 影響を受けるシステム：サン・マイクロシステムズ (cve_2010_0740_record_of) の情報を追加ベンダ情報：サン・マイクロシステムズ (cve_2010_0740_record_of) を追加 [2010年09月27日] 影響を受けるシステム：ターボリナックス (TLSA-2010-30) の情報を追加ベンダ情報：ターボリナックス (TLSA-2010-30) を追加 [2010年11月04日] 影響を受けるシステム：Apache Software Foundation (Fixed in Apache httpd 2.0.64) の情報を追加ベンダ情報：Apache Software Foundation (Fixed in Apache httpd 2.0.64) を追加 [2011年05月19日] 影響を受けるシステム：サン・マイクロシステムズ (cve_2010_0740_record_of) の情報をオラクル (cve_2010_0740_record_of) の情報に変更ベンダ情報：サン・マイクロシステムズ (cve_2010_0740_record_of) の情報をオラクル (cve_2010_0740_record_of) に変更 [2011年11月24日] 影響を受けるシステム：富士通 (interstage_as_201103) の情報を追加ベンダ情報：富士通 (interstage_as_201103) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:apr-util:1.3.6-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.6-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.7:::::::*
cpe:2.3:a:apache:apr-util:1.3.6:::::::*
cpe:2.3:a:apache:apr-util:0.9.2-dev:::::::*
cpe:2.3:a:apache:apr-util:1.3.3:::::::*
cpe:2.3:a:apache:apr-util:0.9.9:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.7-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.3:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.6:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.16-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.8:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.1:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.2:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.4:::::::*
cpe:2.3:a:apache:apr-util:1.3.0:::::::*
cpe:2.3:a:apache:apr-util:1.3.4:::::::*
cpe:2.3:a:apache:apr-util:0.9.4:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.4:::::::*
cpe:2.3:a:apache:apr-util:0.9.3:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.3:::::::*
cpe:2.3:a:apache:apr-util:0.9.7-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.1:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.3-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.8:::::::*
cpe:2.3:a:apache:apr-util:0.9.1:::::::*
cpe:2.3:a:apache:apr-util:0.9.6:::::::*
cpe:2.3:a:apache:apr-util:1.3.1:::::::*
cpe:2.3:a:apache:apr-util:1.3.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.2:::::::*
cpe:2.3:a:apache:apr-util:1.3.2:::::::*
cpe:2.3:a:apache:apr-util:1.3.4-dev:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.7:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.2-dev:::::::*
cpe:2.3:a:apache:apr-util:1.3.7:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.2:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.6:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.9:::::::*
cpe:2.3:a:apache:apr-util:0.9.8:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.5:::::::*
cpe:2.3:a:apache:apr-util:0.9.16:::::::*
cpe:2.3:a:apache:portable_runtime:0.9.3-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.4-dev:::::::*
cpe:2.3:a:apache:portable_runtime:1.3.0:::::::*
cpe:2.3:a:apache:apr-util:1.3.8:::::::*
cpe:2.3:a:apache:apr-util:0.9.5:::::::*