CVE-2021-41773

CVE-2021-41773 apache http server 취약점 2.4.49에서만 동작 요구 사항 설정 httpd.conf root@kitploit: ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... 참고 자료...

CVE-2019-0217

A race condition was found in modauthdigest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions. Mitigation This flaw only affects a threaded server...