Lucene search
Apache Team FoundationHTTPD:05AF7B1B11654BC6892C02003A12DE06HistoryMar 09, 2009 - 12:00 a.m.
Apache Httpd < 2.2.12 : AllowOverride Options handling bypass
2009-03-0900:00:00
Apache Team Foundation
httpd.apache.org
19
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.001
Percentile
41.8%
A flaw was found in the handling of the โOptionsโ and โAllowOverrideโ directives. In configurations using the โAllowOverrideโ directive with certain โOptions=โ arguments, local users were not restricted from executing commands from a Server-Side-Include script as intended.
Affected configurations
Node
apacheapache_httpdMatch2.2.11
ORapacheapache_httpdMatch2.2.10
ORapacheapache_httpdMatch2.2.9
ORapacheapache_httpdMatch2.2.8
ORapacheapache_httpdMatch2.2.6
ORapacheapache_httpdMatch2.2.5
ORapacheapache_httpdMatch2.2.4
ORapacheapache_httpdMatch2.2.3
ORapacheapache_httpdMatch2.2.2
ORapacheapache_httpdMatch2.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | apache_httpd | 2.2.11 | cpe:2.3:a:apache:apache_httpd:2.2.11:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.10 | cpe:2.3:a:apache:apache_httpd:2.2.10:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.9 | cpe:2.3:a:apache:apache_httpd:2.2.9:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.8 | cpe:2.3:a:apache:apache_httpd:2.2.8:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.6 | cpe:2.3:a:apache:apache_httpd:2.2.6:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.5 | cpe:2.3:a:apache:apache_httpd:2.2.5:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.4 | cpe:2.3:a:apache:apache_httpd:2.2.4:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.3 | cpe:2.3:a:apache:apache_httpd:2.2.3:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.2 | cpe:2.3:a:apache:apache_httpd:2.2.2:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.2.0 | cpe:2.3:a:apache:apache_httpd:2.2.0:*:*:*:*:*:*:* |
Related
openvas
openvas
Debian: Security Advisory (DSA-1816-1)
2009-06-23 00:00:00
nvd
nvd
CVE-2009-1195
2009-05-28 20:30:00
veracode
veracode
Privilege Escalation
2020-04-10 00:33:35
seebug
seebug
Apache HTTP Server AllowOverride้้กน็ป่ฟๅฎๅ
จ้ๅถๆผๆด
2009-06-22 00:00:00
cve
cve
CVE-2009-1195
2009-05-28 20:30:00
securityvulns
securityvulns
Apache protection bypass
2009-06-01 00:00:00
[ MDVSA-2009:124 ] apache
2009-06-01 00:00:00
ubuntucve
ubuntucve
CVE-2009-1195
2009-05-28 00:00:00
debian
debian
[SECURITY] [DSA 1816-1] New apache2 packages fix privilege escalation
2009-06-16 19:56:30
prion
prion
Design/Logic Flaw
2009-05-28 20:30:00
cvelist
cvelist
CVE-2009-1195
2009-05-28 20:14:00
debiancve
debiancve
CVE-2009-1195
2009-05-28 20:30:00
nessus
nessus
MDVA-2009:095 : apache
2009-06-11 00:00:00
Debian DSA-1816-1 : apache2 - insufficient security check
2009-06-18 00:00:00
RHEL 5 : httpd (RHSA-2009:1075)
2009-05-28 00:00:00
oraclelinux
oraclelinux
httpd security update
2009-05-27 00:00:00
redhat
redhat
(RHSA-2009:1075) Moderate: httpd security update
2009-05-27 00:00:00
(RHSA-2009:1155) Important: httpd security update
2009-07-14 00:00:00
(RHSA-2009:1156) Important: httpd security update
2009-07-14 00:00:00
centos
centos
httpd, mod_ssl security update
2009-05-28 17:08:08
gentoo
gentoo
Apache: Multiple vulnerabilities
2009-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.13-1.fc11
2009-08-31 23:39:38
ubuntu
ubuntu
Apache vulnerabilities
2009-06-11 00:00:00
suse
suse
potential code execution in apache2,libapr1
2009-10-26 13:21:56
freebsd
freebsd
apache22 -- several vulnerabilities
2009-07-28 00:00:00
slackware
slackware
httpd
2009-08-02 15:33:03
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
osv
osv
apache2-2.4.23-4.1 on GA media
2024-06-15 00:00:00
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.001
Percentile
41.8%
Related for HTTPD:05AF7B1B11654BC6892C02003A12DE06