Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1191
HistoryApr 23, 2009 - 12:00 a.m.

CVE-2009-1191

2009-04-2300:00:00
ubuntu.com
ubuntu.com
9

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.9%

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server
2.2.11 allows remote attackers to obtain sensitive response data, intended
for a client that sent an earlier POST request with no request body, via an
HTTP request.

Notes

Author Note
jdstrand affected code only in 2.2.11 (Ubuntu 9.04)
OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchapache2< 2.2.11-2ubuntu2.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.9%