Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1191
HistoryApr 23, 2009 - 5:30 p.m.

CVE-2009-1191

2009-04-2317:30:01
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

JSON

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.

Affected configurations

NVD
Node
apachehttp_serverMatch2.2.11
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch8.04-
OR
canonicalubuntu_linuxMatch8.10
OR
canonicalubuntu_linuxMatch9.04

References

Related

seebug 1
prion 1
cvelist 1
debiancve 1
veracode 1
redhat 1
nessus 10
openvas 18
ubuntucve 1
httpd 1
cve 1
gentoo 1
fedora 1
ubuntu 1
freebsd 1
altlinux 3
slackware 1
securityvulns 1
oracle 1
seebug
seebug
Apache mod_proxy_ajp信息泄露漏洞
2009-04-25 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-04-23 17:30:00
cvelist
cvelist
CVE-2009-1191
2009-04-23 17:00:00
debiancve
debiancve
CVE-2009-1191
2009-04-23 17:30:01
veracode
veracode
Information Disclosure
2020-04-10 00:38:15
redhat
redhat
(RHSA-2009:1058) Important: httpd security update
2009-05-20 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2009:102)
2010-07-30 00:00:00
Fedora 11 : httpd-2.2.13-1.fc11 (2009-8812)
2009-09-02 00:00:00
GLSA-200907-04 : Apache: Multiple vulnerabilities
2009-07-13 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:102 (apache)
2009-06-05 00:00:00
Apache mod_proxy_ajp Information Disclosure Vulnerability
2009-04-30 00:00:00
Mandrake Security Advisory MDVSA-2009:102 (apache)
2009-06-05 00:00:00
ubuntucve
ubuntucve
CVE-2009-1191
2009-04-23 00:00:00
httpd
httpd
Apache Httpd < 2.2.12 : mod_proxy_ajp information disclosure
2009-03-05 00:00:00
cve
cve
CVE-2009-1191
2009-04-23 17:30:01
gentoo
gentoo
Apache: Multiple vulnerabilities
2009-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.13-1.fc11
2009-08-31 23:39:38
ubuntu
ubuntu
Apache vulnerabilities
2009-06-11 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2009-07-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
slackware
slackware
httpd
2009-08-02 15:33:03
securityvulns
securityvulns
Oracle / Sun / MySQL / PeopleSoft multiple applications security vulnerabilities
2013-05-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.9%

JSON
Related for NVD:CVE-2009-1191
seebug1prion1cvelist1debiancve1veracode1redhat1nessus10openvas18ubuntucve1httpd1cve1gentoo1fedora1ubuntu1freebsd1altlinux3slackware1securityvulns1oracle1