|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200409-33] Apache: Exposure of protected directories Vulnerability Assessment Details
|
[GLSA-200409-33] Apache: Exposure of protected directories |
||
Apache: Exposure of protected directories Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200409-33 (Apache: Exposure of protected directories) A bug in the way Apache handles the Satisfy directive, which is used to require that certain conditions (client host, client authentication, etc) be met before access to a certain directory is granted, could permit the exposure of protected directories to unauthorized clients. Impact Directories containing protected data could be exposed to all visitors to the webserver. Workaround There is no known workaround at this time. References: http://issues.apache.org/bugzilla/show_bug.cgi?id=31315 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0811 Solution: All Apache users should upgrade to the latest version: # emerge sync # emerge -pv ">=net-www/apache-2.0.51-r1" # emerge ">=net-www/apache-2.0.51-r1" Network Security Threat Level: Low Networks Security ID: Vulnerability Assessment Copyright: (C) 2005 Michel Arboi |
||
Cables, Connectors |
Dell PowerEdge R720 Server - 2x8c CPU,256Gb RAM, 128Gb SSD/3x600Gb SAS, Proxmox
$340.00
EXAGRID EX32000E Server Intel Xeon E5620 @ 2.40GHz 16GB RAM 16x 2TB HDD
$679.00
Supermicro 4U 36 Bay Storage Server 2.4Ghz 8-C 128GB 1x1280W Rails TrueNAS ZFS
$721.06
Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5
$46.00
Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION
$12.00
Intel Xeon e5-2698v3 2.30Ghz 16 Core 32 Thread CPU SR1XE
$20.99
Intel Xeon E5-2697 V4 2.30 GHz 18C 2011-3 2400MHz 45MB 145W SR2JV CPU Processor
$49.99
HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA
$243.59
Dell Precision 3420 SFF Intel Xeon E3-1220 v5 16GB RAM 240GB SSD Win 10 Desktop
$119.99
|
||
No Discussions have been posted on this vulnerability. |