PT-2020-3260 · Apache +8 · Apache Http Server +8

🗓️ 24 Feb 2020 00:00:00Reported by Positive TechnologiesType

Apache HTTP Server 2.4.0–2.4.41 may expose data via uninitialized memory in mod_proxy_ftp; disable the module.

Reporter	Title	Published	Views	Family All 1823
0day.today	Apache Httpd mod_proxy - Error Page Cross-Site Scripting Vulnerability	19 Nov 201900:00	–	zdt
0day.today	Apache Httpd mod_rewrite - Open Redirects Vulnerability	19 Nov 201900:00	–	zdt
0day.today	Apache2 mod_proxy_uwsgi Incorrect Request Handling Exploit	31 Aug 202000:00	–	zdt
0day.today	Apache 2 HTTP2 Module Concurrent Pool Usage Vulnerability	8 Dec 202000:00	–	zdt
Oracle linux	tomcat security update	22 Mar 202000:00	–	oraclelinux
Oracle linux	tomcat6 security update	23 Mar 202000:00	–	oraclelinux
Oracle linux	httpd:2.4 security update	11 Sep 202000:00	–	oraclelinux
Oracle linux	httpd security, bug fix, and enhancement update	6 Oct 202000:00	–	oraclelinux
Oracle linux	httpd:2.4 security, bug fix, and enhancement update	10 Nov 202000:00	–	oraclelinux
Oracle linux	httpd:2.4 security, bug fix, and enhancement update	25 May 202100:00	–	oraclelinux

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/tomcat_ghostcat.rb
github	www.github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd
github	www.github.com/sgdream/CVE-2020-1938
github	www.github.com/xindongzhuaizhuai/CVE-2020-1938
github	www.github.com/sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read
github	www.github.com/laolisafe/CVE-2020-1938
github	www.github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat
github	www.github.com/fairyming/CVE-2020-1938
github	www.github.com/dacade/CVE-2020-1938

06 Mar 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.15.3 - 9.8

CVSS 27.5

CVSS 38.1

EPSS0.9927

SSVC