Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0434
HistoryMar 05, 2010 - 7:30 p.m.

CVE-2010-0434

2010-03-0519:30:00
CWE-200
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.

Affected configurations

NVD
Node
apachehttp_serverRange2.0.35–2.0.64
OR
apachehttp_serverRange2.2.0–2.2.15
Node
fedoraprojectfedoraMatch11
OR
fedoraprojectfedoraMatch13
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0

References

Related

nessus 28
seebug 1
openvas 28
veracode 1
ubuntucve 1
oraclelinux 2
redhat 3
cvelist 1
centos 2
securityvulns 5
f5 2
httpd 2
debiancve 1
cve 1
prion 1
debian 2
osv 1
ubuntu 1
fedora 3
kaspersky 2
vmware 2
gentoo 1
oracle 1
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2010:057)
2010-03-08 00:00:00
CentOS 4 : httpd (CESA-2010:0175)
2010-03-29 00:00:00
Scientific Linux Security Update : httpd on SL4.x i386/x86_64
2012-08-01 00:00:00
seebug
seebug
Apache 2.2.x子请求处理信息泄露漏洞
2010-03-23 00:00:00
openvas
openvas
Mandriva Update for nuface MDVA-2010:057 (nuface)
2010-02-15 00:00:00
Mandriva Update for apache MDVSA-2010:057 (apache)
2010-03-12 00:00:00
CentOS Update for httpd CESA-2010:0175 centos4 i386
2010-03-31 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:47:47
ubuntucve
ubuntucve
CVE-2010-0434
2010-03-05 00:00:00
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
httpd security and enhancement update
2010-03-25 00:00:00
redhat
redhat
(RHSA-2010:0175) Low: httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
(RHSA-2010:0396) Moderate: httpd and httpd22 security and enhancement update
2010-05-05 00:00:00
(RHSA-2010:0168) Moderate: httpd security and enhancement update
2010-03-25 00:00:00
cvelist
cvelist
CVE-2010-0434
2010-03-05 19:00:00
centos
centos
httpd, mod_ssl security update
2010-03-28 20:51:15
httpd, mod_ssl security update
2010-03-28 15:40:00
securityvulns
securityvulns
[ MDVSA-2010:057 ] apache
2010-03-09 00:00:00
Apache HTTPD information leak
2010-03-09 00:00:00
Apple Mac OS X and QuickTime multiple security vulnerabilities
2013-11-18 00:00:00
f5
f5
K40284849 : Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
SOL40284849 - Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
httpd
httpd
Apache Httpd < 2.0.64 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
Apache Httpd < 2.2.15 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
debiancve
debiancve
CVE-2010-0434
2010-03-05 19:30:00
cve
cve
CVE-2010-0434
2010-03-05 19:30:00
prion
prion
Design/Logic Flaw
2010-03-05 19:30:00
debian
debian
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
osv
osv
apache2 - several issues
2010-04-17 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2010-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: httpd-2.2.15-1.fc12.2
2010-05-31 18:25:29
[SECURITY] Fedora 11 Update: httpd-2.2.15-1.fc11.1
2010-05-04 06:06:43
[SECURITY] Fedora 13 Update: httpd-2.2.15-1.fc13
2010-04-22 22:51:41
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON
Related for NVD:CVE-2010-0434
nessus28seebug1openvas28veracode1ubuntucve1oraclelinux2redhat3cvelist1centos2securityvulns5f52httpd2debiancve1cve1prion1debian2osv1ubuntu1fedora3kaspersky2vmware2gentoo1oracle1