The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously-used data, which could be used to obtain potentially sensitive information by unauthorized users.

Updated packages have been patched to prevent this issue.

The remote host is affected by the vulnerability described in GLSA-200711-06 (Apache: Multiple vulnerabilities)

    Multiple cross-site scripting vulnerabilities have been discovered in     mod_status and mod_autoindex (CVE-2006-5752, CVE-2007-4465). An error     has been discovered in the recall_headers() function in mod_mem_cache     (CVE-2007-1862). The mod_cache module does not properly sanitize     requests before processing them (CVE-2007-1863). The Prefork module     does not properly check PID values before sending signals     (CVE-2007-3304). The mod_proxy module does not correctly check headers     before processing them (CVE-2007-3847).
  Impact :

    A remote attacker could exploit one of these vulnerabilities to inject     arbitrary script or HTML content, obtain sensitive information or cause     a Denial of Service.
  Workaround :

    There is no known workaround at this time.

This update includes the latest stable release of the Apache HTTP Server.

A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. On sites where a forward proxy is configured, an attacker could cause a similar crash if a user could be persuaded to visit a malicious site using the proxy. This could lead to a denial of service if using a threaded Multi-Processing Module.
(CVE-2007-3847)

A flaw was found in the mod_autoindex module. On sites where directory listings are used, and the AddDefaultCharset directive has been removed from the configuration, a cross-site-scripting attack may be possible against browsers which do not correctly derive the response character set following the rules in RFC 2616. (CVE-2007-4465)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

バナーによると、リモートホストにインストールされている Apache 2.2 のバージョンは、2.2.6 より前です。そのようなバージョンは、以下を含むいくつかの問題の影響を受けることがあります。

  - mod_proxy でのサービス拒否脆弱性。 
  - mod_status でのクロスサイトスクリプティング脆弱性。
  - Prefork MPM モジュールに関連するローカルサービス拒否脆弱性。
  - mod_cache での情報漏洩。
  - mod_cache でのサービス拒否脆弱性。

さらに、mod_autoindex でのクロスサイトスクリプティング問題の回避策が提供されます。 

リモート Web サーバーは、実際にはこれらの脆弱性の影響を受けない場合があることに、注意してください。Nessus は、影響を受けるモジュールのいずれかがリモートサーバーで使用されているか、または問題そのものを確認しようとしませんでした。

根据其标题，远程主机上运行的 Apache 2.2.x 版本低于 2.2.6。因此，该应用程序受到以下漏洞的影响：

  - mod_proxy 中的拒绝服务漏洞。 
  - mod_status 中的跨站脚本漏洞。
  - 与 Prefork MPM 模块相关的本地拒绝服务漏洞。
  - mod_cache 中的信息泄漏。
  - mod_cache 中的拒绝服务漏洞。

此外，它提供了针对 mod_autoindex 中跨站脚本问题的变通办法。 

请注意远程 Web 服务器实际上可能不会受到这些漏洞的影响。Nessus 未尝试确定远程服务器上是否使用任何受影响的模块或检查问题本身。

According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.6. It is, therefore, affected by the following vulnerabilities :

  - A denial of service vulnerability in mod_proxy. 
  - A cross-site scripting vulnerability in mod_status.
  - A local denial of service vulnerability associated with     the Prefork MPM module.
  - An information leak in mod_cache.
  - A denial of service vulnerability in mod_cache.

In addition, it offers a workaround for a cross-site scripting issue in mod_autoindex. 

Note that the remote web server may not actually be affected by these vulnerabilities. Nessus did not try to determine whether any of the affected modules are in use on the remote server or to check for the issues themselves.

The Apache HTTP Server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the Apache HTTP Server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of service (CVE-2007-3304). This issue is not exploitable on Fedora if using the default SELinux targeted policy.

A flaw was found in the Apache HTTP Server mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. On Fedora the server-status page is not enabled by default and it is best practice to not make this publicly available. (CVE-2006-5752)

A bug was found in the Apache HTTP Server mod_cache module. On sites where caching is enabled, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. This could lead to a denial of service if using a threaded Multi-Processing Module. (CVE-2007-1863)

A bug was found in the mod_mem_cache module. On sites where caching is enabled using this module, an information leak could occur which revealed portions of sensitive memory to remote users. (CVE-2007-1862)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

根據其標題，遠端主機上執行的 Apache 2.2.x 版本比 2.2.6 舊。因此，該應用程式受到以下弱點影響：

  - mod_proxy 中的拒絕服務弱點。 
  - mod_status 中的跨網站指令碼弱點。
  - 與 Prefork MPM 模組相關的本機拒絕服務弱點。
  - mod_cache 中的資訊洩漏。
  - mod_cache 中的拒絕服務弱點。

此外，還提供 mod_autoindex 跨網站指令碼問題的因應措施。 

請注意，遠端 Web 伺服器可能實際上並不會受這些弱點影響。Nessus 並未嘗試判斷受影響的模組是否仍在遠端伺服器上使用中，也未嘗試檢查問題本身。

ID	名稱	產品	系列	已發布	已更新	嚴重性
38078	Mandrake Linux Security Advisory : apache (MDKSA-2007:127)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	medium
27823	GLSA-200711-06 : Apache: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2007/11/8	2021/1/6	medium
27758	Fedora 7 : httpd-2.2.6-1.fc7 (2007-2214)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	medium
26023	Apache < 2.2.6 の複数の脆弱性（DoS、XSS、Info Disc）	Nessus	Web Servers	2007/9/14	2018/6/29	medium
26023	Apache 2.2.x < 2.2.6 多个漏洞（DoS、XSS、信息泄露）	Nessus	Web Servers	2007/9/14	2018/6/29	medium
26023	Apache 2.2.x < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc)	Nessus	Web Servers	2007/9/14	2018/6/29	medium
27675	Fedora 7 : httpd-2.2.4-4.1.fc7 (2007-0704)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	medium
26023	Apache 2.2.x < 2.2.6 多個弱點 (DoS、XSS、Info Disc)	Nessus	Web Servers	2007/9/14	2018/6/29	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium