Oracle HTTP Server 2.2.9 Proxy Plug-In mod_proxy_http.c information disclosure
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.6 | $0-$5k | 0.00 |
A vulnerability classified as problematic has been found in Oracle HTTP Server 2.2.9 (Web Server). Affected is an unknown code of the file mod_proxy_http.c of the component Proxy Plug-In. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:
mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
The weakness was shared 07/16/2013 as Oracle Critical Patch Update Advisory - July 2013 as confirmed advisory (Website). The advisory is available at oracle.com. This vulnerability is traded as CVE-2010-2068 since 05/25/2010. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.
It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 48205 (Apache 2.2.x < 2.2.16 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Web Servers and running in the context r. The commercial vulnerability scanner Qualys is able to test this issue with plugin 87123 (HP System Management Homepage Multiple Vulnerabilities (HPSBMU02764)).
Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (59413) and Tenable (48205). The entries 4323, 4582, 4583 and 7810 are related to this item.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Information disclosureCWE: CWE-200 / CWE-284 / CWE-266
ATT&CK: T1592
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 48205
Nessus Name: Apache 2.2.x < 2.2.16 Multiple Vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 831132
OpenVAS Name: Mandriva Update for apache MDVSA-2010:153 (apache)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
Exposure Time: 🔍
Timeline
05/25/2010 🔍06/11/2010 🔍
06/14/2010 🔍
06/14/2010 🔍
06/18/2010 🔍
07/30/2010 🔍
04/16/2012 🔍
07/16/2013 🔍
07/16/2013 🔍
07/23/2013 🔍
03/14/2016 🔍
02/01/2019 🔍
Sources
Vendor: oracle.comAdvisory: Oracle Critical Patch Update Advisory - July 2013
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2010-2068 (🔍)
OVAL: 🔍
IAVM: 🔍
X-Force: 59413 - Apache mod_proxy_http timeout information disclosure
SecurityTracker: 1024096
Vulnerability Center: 57299 - [cpuapr2013-1899555, cpujuly2013-1899826] Apache HTTP Server mod_proxy_http Remote Information Disclosure Vulnerability via HTTP Requests, Low
SecurityFocus: 40827 - Apache 'mod_proxy_http' Timeout Handling Information Disclosure Vulnerability
Secunia: 40206 - Apache Information Disclosure and Denial of Service Vulnerabilities, Less Critical
Vupen: ADV-2010-1436
See also: 🔍
Entry
Created: 07/23/2013 10:13Updated: 02/01/2019 09:37
Changes: 07/23/2013 10:13 (87), 02/01/2019 09:37 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.