CVE-2009-1191 in HTTP Server

Resumen (Inglés)

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2009-03-31

Divulgación

2009-04-23

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
8305	Oracle HTTP Server Web Listener escalada de privilegios	20	Prueba de concepto	Arreglo oficial	CVE-2009-1191

Fuentes

• MITRE
• NVD
• CVE Details