CVE-2009-1191 in HTTP Server
Summary
mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
03/31/2009
Disclosure
04/23/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8305 | Oracle HTTP Server Web Listener input validation | 20 | Proof-of-Concept | Official fix | CVE-2009-1191 |