Lucene search

K
nessusTenable6550.PRM
HistoryAug 23, 2012 - 12:00 a.m.

Apache 2.4.1, 2.4.2 Multiple Vulnerabilities

2012-08-2300:00:00
Tenable
www.tenable.com
10

The remote host is running a Apache HTTP server.

Versions 2.4.1 and 2.4.2 are vulnerable to the following vulnerabilities :

  • An input validation error exists related to ‘mod_negotiation’, ‘Multiviews’ and untrusted uploads that can allow cross-site scripting attacks. (CVE-2012-2687)

  • An error exists related to ‘mod_proxy_ajp’ and ‘mod_proxy_http’ that can allow connections to remain open. This condition can allow information disclosure when combined with specially crafted requests. (CVE-2012-3502)

Binary data 6550.prm
VendorProductVersionCPE
apachehttp_server2.4cpe:/a:apache:http_server:2.4