Test ID:	1.3.6.1.4.1.25623.1.0.900499
Category:	Web application abuses
Title:	Apache mod_proxy_ajp Information Disclosure Vulnerability
Summary:	Check for Apache Web Server version
Description:	Overview: This host is running Apache Web Server and is prone to Information Disclosure Vulnerability. Vulnerability Insight: This flaw is due to an error in 'mod_proxy_ajp' when handling improperly malformed POST requests. Impact: Successful exploitation will let the attacker craft a special HTTP POST request and gain sensitive information about the web server. Impact level: Application Affected Software/OS: Apache HTTP Version 2.2.11 Workaround: Update mod_proxy_ajp.c through SVN Repository (Revision 767089) http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff Fix: Upgrade to Apache HTTP Version 2.2.15 or later For further updates refer, http://httpd.apache.org/download.cgi References: http://secunia.com/advisories/34827 http://xforce.iss.net/xforce/xfdb/50059 http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089
Cross-Ref:	BugTraq ID: 34663 Common Vulnerability Exposure (CVE) ID: CVE-2009-1191 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html http://security.gentoo.org/glsa/glsa-200907-04.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:102 http://www.ubuntu.com/usn/usn-787-1 http://www.securityfocus.com/bid/34663 http://osvdb.org/53921 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8261 http://www.securitytracker.com/id?1022264 http://secunia.com/advisories/34827 http://secunia.com/advisories/35395 http://secunia.com/advisories/35721 http://www.vupen.com/english/advisories/2009/1147 http://www.vupen.com/english/advisories/2009/3184 XForce ISS Database: apache-modproxyajp-information-disclosure(50059) http://xforce.iss.net/xforce/xfdb/50059
Copyright	Copyright (C) 2009 SecPod

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: