Lucene search
RootSSV:5101HistoryApr 25, 2009 - 12:00 a.m.
Apache mod_proxy_ajp信息泄露漏洞
2009-04-2500:00:00
Root
www.seebug.org
32
0.003 Low
EPSS
Percentile
66.8%
BUGTRAQ ID: 34663
CVE(CAN) ID: CVE-2009-1191
Apache HTTP Server是一款流行的Web服务器。
Apache服务器的mod_proxy_ajp模块在处理畸形的POST请求时存在错误，远程攻击者可以通过提交特制的HTTP请求泄露其他用户请求相关的响应数据。
Apache 2.2.11
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff” target=“_blank”>http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff</a>
Related
prion
prion
Cross site request forgery (csrf)
2009-04-23 17:30:00
veracode
veracode
Information Disclosure
2020-04-10 00:38:15
redhat
redhat
(RHSA-2009:1058) Important: httpd security update
2009-05-20 00:00:00
debiancve
debiancve
CVE-2009-1191
2009-04-23 17:30:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:102 (apache)
2009-06-05 00:00:00
Apache HTTP Server 'mod_proxy_ajp' Information Disclosure Vulnerability
2009-04-30 00:00:00
Apache mod_proxy_ajp Information Disclosure Vulnerability
2009-04-30 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2009:102)
2010-07-30 00:00:00
Fedora 11 : httpd-2.2.13-1.fc11 (2009-8812)
2009-09-02 00:00:00
GLSA-200907-04 : Apache: Multiple vulnerabilities
2009-07-13 00:00:00
httpd
httpd
Apache Httpd < 2.2.12 : mod_proxy_ajp information disclosure
2009-03-05 00:00:00
ubuntucve
ubuntucve
CVE-2009-1191
2009-04-23 00:00:00
cve
cve
CVE-2009-1191
2009-04-23 17:30:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2009-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.13-1.fc11
2009-08-31 23:39:38
ubuntu
ubuntu
Apache vulnerabilities
2009-06-11 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2009-07-28 00:00:00
slackware
slackware
httpd
2009-08-02 15:33:03
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
securityvulns
securityvulns
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00