National Cyber-Alert System

Vulnerability Summary for CVE-2009-1195

Overview

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=489436

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=489436

External Source: CONFIRM

Name: http://svn.apache.org/viewvc?view=rev&revision=772997

Type: Advisory; Patch Information

Hyperlink:http://svn.apache.org/viewvc?view=rev&revision=772997

External Source: XF

Name: apache-allowoverrides-security-bypass(50808)

Hyperlink:http://xforce.iss.net/xforce/xfdb/50808

External Source: VUPEN

Name: ADV-2009-1444

Hyperlink:http://www.vupen.com/english/advisories/2009/1444

External Source: UBUNTU

Name: USN-787-1

Hyperlink:http://www.ubuntu.com/usn/usn-787-1

External Source: SECTRACK

Name: 1022296

Hyperlink:http://www.securitytracker.com/id?1022296

External Source: BID

Name: 35115

Hyperlink:http://www.securityfocus.com/bid/35115

External Source: REDHAT

Name: RHSA-2009:1156

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1156.html

External Source: REDHAT

Name: RHSA-2009:1075

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1075.html

External Source: MANDRIVA

Name: MDVSA-2009:124

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:124

External Source: DEBIAN

Name: DSA-1816

Hyperlink:http://www.debian.org/security/2009/dsa-1816

External Source: GENTOO

Name: GLSA-200907-04

Hyperlink:http://security.gentoo.org/glsa/glsa-200907-04.xml

External Source: SECUNIA

Name: 35721

Hyperlink:http://secunia.com/advisories/35721

External Source: SECUNIA

Name: 35453

Hyperlink:http://secunia.com/advisories/35453

External Source: SECUNIA

Name: 35395

Hyperlink:http://secunia.com/advisories/35395

External Source: SECUNIA

Name: 35264

Type: Advisory

Hyperlink:http://secunia.com/advisories/35264

External Source: SECUNIA

Name: 35261

Hyperlink:http://secunia.com/advisories/35261

External Source: OSVDB

Name: 54733

Hyperlink:http://osvdb.org/54733

External Source: MLIST

Name: [apache-httpd-dev] 20090423 Includes vs IncludesNoExec security issue - help needed

Hyperlink:http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2