CVE-2010-0408

CVE-2010-0408 describes a denial-of-service vulnerability in the mod_proxy_ajp module of Apache HTTP Server 2.2.x before version 2.2.15. Specifically, the ap_proxy_ajp_request function mishandles requests lacking a body, leading to a backend server outage by returning an incorrect 500 error instead of a 400. With a CVSS score of 5.0, this vulnerability is of medium severity, allowing unauthenticated remote attackers to cause a partial denial of service with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage for this decade-old vulnerability.