Test Kennung:	1.3.6.1.4.1.25623.1.0.11092
Kategorie:	Web Servers
Titel:	Apache HTTP Server 2.0.x <= 2.0.39 Win32 Directory Traversal Vulnerability
Zusammenfassung:	Apache HTTP Server is prone to a directory traversal vulnerability.
Beschreibung:	Summary: Apache HTTP Server is prone to a directory traversal vulnerability. Vulnerability Insight: A security vulnerability in Apache 2.0.39 on Windows systems allows attackers to access files that would otherwise be inaccessible using a directory traversal attack. Vulnerability Impact: A cracker may use this to read sensitive files or even execute any command on your system. Affected Software/OS: Apache HTTP Server 2.0 through 2.0.39. Solution: Update to Apache HTTP Server version 2.0.40 or later. As a workaround add in the httpd.conf, before the first 'Alias' or 'Redirect' directive: RedirectMatch 400 \\\.\. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0661 BugTraq ID: 5434 http://www.securityfocus.com/bid/5434 Bugtraq: 20020809 Apache 2.0 vulnerability affects non-Unix platforms (Google Search) http://marc.info/?l=bugtraq&m=102892744011436&w=2 Bugtraq: 20020816 Apache 2.0.39 directory traversal and path disclosure bug (Google Search) http://marc.info/?l=bugtraq&m=102951160411052&w=2 https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E http://www.iss.net/security_center/static/9808.php
Copyright	Copyright (C) 2002 Michel Arboi

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.