Lucene search
RootSSV:19320HistoryMar 23, 2010 - 12:00 a.m.
Apache 2.2.x子请求处理信息泄露漏洞
2010-03-2300:00:00
Root
www.seebug.org
121
0.003 Low
EPSS
Percentile
67.1%
BUGTRAQ ID: 38580
CVE(CAN) ID: CVE-2010-0434
Apache HTTP Server是一款流行的Web服务器。
在使用多线程MPM时，Apache HTTP Server的server/protocol.c文件中的ap_read_request函数没有正确地处理子请求，可能允许远程攻击者从其他线程所处理的请求中读取敏感信息。
Apache Group Apache 2.2.x
厂商补丁：
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://svn.apache.org/viewvc?view=revision&revision=918427
http://svn.apache.org/viewvc?view=revision&revision=917867
Related
openvas
openvas
Mandriva Update for apache MDVSA-2010:057 (apache)
2010-03-12 00:00:00
CentOS Update for httpd CESA-2010:0175 centos4 i386
2010-03-31 00:00:00
Mandriva Update for nuface MDVA-2010:057 (nuface)
2010-02-15 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2010:057)
2010-03-08 00:00:00
CentOS 4 : httpd (CESA-2010:0175)
2010-03-29 00:00:00
RHEL 4 : httpd (RHSA-2010:0175)
2010-05-11 00:00:00
ubuntucve
ubuntucve
CVE-2010-0434
2010-03-05 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:47:47
securityvulns
securityvulns
[ MDVSA-2010:057 ] apache
2010-03-09 00:00:00
Apache HTTPD information leak
2010-03-09 00:00:00
Apple Mac OS X and QuickTime multiple security vulnerabilities
2013-11-18 00:00:00
centos
centos
httpd, mod_ssl security update
2010-03-28 20:51:15
httpd, mod_ssl security update
2010-03-28 15:40:00
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
httpd security and enhancement update
2010-03-25 00:00:00
redhat
redhat
(RHSA-2010:0175) Low: httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
(RHSA-2010:0396) Moderate: httpd and httpd22 security and enhancement update
2010-05-05 00:00:00
(RHSA-2010:0168) Moderate: httpd security and enhancement update
2010-03-25 00:00:00
prion
prion
Design/Logic Flaw
2010-03-05 19:30:00
httpd
httpd
Apache Httpd < 2.2.15 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
Apache Httpd < 2.0.64 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
f5
f5
K40284849 : Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
SOL40284849 - Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
cve
cve
CVE-2010-0434
2010-03-05 19:30:00
debiancve
debiancve
CVE-2010-0434
2010-03-05 19:30:00
debian
debian
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:27
osv
osv
apache2 - several issues
2010-04-17 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2010-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: httpd-2.2.15-1.fc12.2
2010-05-31 18:25:29
[SECURITY] Fedora 11 Update: httpd-2.2.15-1.fc11.1
2010-05-04 06:06:43
[SECURITY] Fedora 13 Update: httpd-2.2.15-1.fc13
2010-04-22 22:51:41
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00