Lucene search
Tenable6576.PRMHistorySep 17, 2012 - 12:00 a.m.
Apache 2.2 < 2.2.23 Multiple Vulnerabilities
2012-09-1700:00:00
Tenable
www.tenable.com
9
Apache versions earlier than 2.2.23 are affected by the following vulnerabilities.
-
The utility ‘apachectl’ can receive a zero-length directory name in the LD_LIBRARY_PATH via the ‘envvars’ file. A local attacker with access to that utility could exploit this to load a malicious Dynamic Shared Object (DSO), leading to arbitrary code execution. (CVE-2012-0883)
-
An input validation error exists related to ‘mod_negotiation’, ‘Multiviews’ and untrusted uploads that can allow cross-site scripting attacks. (CVE-2012-2687)
Binary data 6576.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | http_server | 2.2 | cpe:/a:apache:http_server:2.2 |
Related
securityvulns
securityvulns
Apache security vulnerabilities
2012-10-01 00:00:00
[ MDVSA-2012:154 ] apache
2012-10-01 00:00:00
openvas
openvas
Mandriva Update for apache MDVSA-2012:154-1 (apache)
2012-10-03 00:00:00
Mandriva Update for apache MDVSA-2012:154-1 (apache)
2012-10-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0387-1)
2021-06-09 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : apache (multiple_vulnerabilities_in_apache_http2)
2015-01-19 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2012:154-1)
2012-10-02 00:00:00
Apache 2.2.x < 2.2.23 Multiple Vulnerabilities
2012-09-14 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: httpd-2.2.23-1.fc17
2013-02-12 04:59:23
freebsd
freebsd
apache22 -- several vulnerabilities
2012-09-13 00:00:00
Apache -- Insecure LD_LIBRARY_PATH handling
2012-03-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
f5
f5
SOL15901 - Apache HTTP server vulnerability CVE-2012-2687
2014-12-10 00:00:00
K15901 : Apache HTTP server vulnerability CVE-2012-2687
2015-06-08 00:00:00
cve
cve
CVE-2012-2687
2012-08-22 19:55:00
CVE-2012-0883
2012-04-18 10:33:00
prion
prion
Directory traversal
2012-04-18 10:33:00
Cross site scripting
2012-08-22 19:55:00
ubuntucve
ubuntucve
CVE-2012-0883
2012-04-18 00:00:00
CVE-2012-2687
2012-08-22 00:00:00
seebug
seebug
Apache HTTP Server envvars本地权限提升漏洞
2012-09-18 00:00:00
Apache HTTP Server 'LD_LIBRARY_PATH'不安全库加载任意代码执行漏洞
2012-10-11 00:00:00
Apache HTTP Server 'LD_LIBRARY_PATH'不安全库装载任意代码执行漏洞
2012-04-20 00:00:00
httpd
httpd
Apache Httpd < 2.4.2 : insecure LD_LIBRARY_PATH handling
2012-02-14 00:00:00
Apache Httpd < 2.2.23 : insecure LD_LIBRARY_PATH handling
2012-02-14 00:00:00
debiancve
debiancve
CVE-2012-2687
2012-08-22 19:55:00
CVE-2012-0883
2012-04-18 10:33:00
threatpost
threatpost
Apache Fixes Two Security Flaws in Version 2.4.3
2012-08-21 17:45:56
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
redhat
redhat
(RHSA-2013:0512) Low: httpd security, bug fix, and enhancement update
2013-02-21 00:00:00
(RHSA-2013:0130) Low: httpd security, bug fix, and enhancement update
2013-01-08 00:00:00
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2013-01-11 00:00:00
httpd security, bug fix, and enhancement update
2013-02-22 00:00:00
centos
centos
httpd, mod_ssl security update
2013-02-27 19:35:19
httpd, mod_ssl security update
2013-01-09 20:52:40
veracode
veracode
Arbitrary File Upload
2019-05-02 04:45:35
Information Disclosure
2019-05-02 04:42:36
Access Restriction Bypass
2019-05-02 04:43:22
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00
Related for 6576.PRM