PT-2010-3680 · Apache · Apache Http Server

Loren Anderson · Published 2010-06-09 · Updated 2024-06-15 · CVE-2010-2068

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.9 through 2.2.15 Apache HTTP Server versions 2.3.4-alpha and 2.3.5-alpha

Description The issue is related to the mod proxy http module in the Apache HTTP Server, which does not properly detect timeouts in certain configurations involving proxy worker pools. This can allow remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. The flaw is triggered under specific timeout conditions, causing the server to return a response intended for another user. The issue affects only Windows, NetWare, and OS/2 operating systems, and only those configurations that trigger the use of proxy worker pools.

Recommendations For Apache HTTP Server versions 2.2.9 through 2.2.15, consider globally configuring the server with the directive: SetEnv proxy-nokeepalive 1 For Apache HTTP Server versions 2.3.4-alpha and 2.3.5-alpha, consider globally configuring the server with the directive: SetEnv proxy-nokeepalive 1 At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-2068

OPENSUSE-SU-2024:10268-1

Affected Products

Apache Http Server

References · 93

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10268-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=nas352ca0ac9460f9b8886257777005dd0e4 · Vendor Advisory
• http://httpd.apache.org/security/vulnerabilities_22.html · Vendor Advisory
• http://apache.org/dist/httpd/patches/apply_to_2.3.5/CVE-2010-2068-r953418.patch · Patch
• http://apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch · Patch
• http://ibm.com/support/docview.wss?uid=swg1PM16366 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0896.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/1436 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2068 · Security Note
• http://secunia.com/advisories/40206 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-0228 · Note
• https://suse.com/security/cve/CVE-2014-3581 · Note