Apache Mod_Mem_Cache远程信息泄露漏洞

Apache是一款开放源代码的HTTP服务程序。 Apache包含的modmemcache模块存在信息泄露问题，远程攻击者可以利用漏洞获得对敏感数据的访问。 在使用modmemcache缓存部分小文件时，在部分条件下，会应答部分错误的HTTP头部数据，包括多个头字段，错误的ETag值，攻击者可以利用这些信息对系统进行进一步攻击。 Apache Software Foundation Apache 2.2.4 可参考如下安全公告： http://people.apache.org/covener/2.2.x-modmemcache-poolmgmt.diff...

CVE-2003-0105

ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...

CVE-2003-0105

CVE-2003-0105 applies to Port80 Software ServerMask (2.2 and earlier) and documents that the product does not obfuscate certain HTTP headers, enabling potential fingerprinting of IIS by observers. The CVE notes that ETag, HTTP status messages, and Allow responses can reveal the underlying web ser...

CVE-2003-1418

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via 1 the ETag header, which reveals the inode number, or 2 multipart MIME boundary, which reveals child process IDs PID...

PT-2003-2363

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 1.3.22 through 1.3.27 Description The issue allows remote attackers to obtain sensitive information. This can be achieved via the ETag header, which reveals the inode number, or the multipart MIME boundary, which...