PT-2009-3743 · Apache+1 · Apache Http Server+1

Publicado

2009-04-22

·

Atualizado

2024-06-15

·

CVE-2009-1195

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.11 and earlier 2.2 versions
Description The issue arises from the improper handling of Options=IncludesNOEXEC in the AllowOverride directive, allowing local users to gain privileges. This can be achieved by configuring certain options in a .htaccess file and then inserting an exec element in a .shtml file. The flaw affects configurations using the AllowOverride directive with specific Options arguments, enabling local users to execute commands from a Server-Side-Include script.
Recommendations For Apache HTTP Server versions 2.2.11 and earlier 2.2 versions, consider disabling the use of Options Includes, Options +Includes, or Options +IncludesNOEXEC in .htaccess files as a temporary workaround until a patch is available. Restrict access to the AllowOverride directive to minimize the risk of exploitation. Avoid using the exec element in .shtml files until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-1195
DSA-1816-1
HPSBUX02612
OPENSUSE-SU-2024:10268-1
RHSA-2009:1075
RHSA-2009:1155
RHSA-2009:1156
RHSA-2009:1160
RHSA-2009_1075

Produtos afetados

Apache Http Server
Red Hat