INFORMATION

Name : CVE-2009-1191 First Publication : 2009-04-23
Severity : Medium Last Modification : 2010-08-21

SCORING CVSS v2

Cvss Base Score : 5 Attack Range : Network
Cvss Impact Score : 2.9 Attack Complexity : Low
Cvss Expoit Score : 10 Authentification : None Required

Calculate full CVSS 2.0 Vectors scores

DETAIL

mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.



CWE COMMON WEAKNESS ENUMERATION

OVALID

oval:org.mitre.oval:def:8261, Apache 'mod_proxy_ajp' Information Disclosure Vulnerability

oval:org.mitre.oval:def:8550, Apache HTTP Server 2.2.x is installed on the system

CPE COMMON PLATFORM ENUMERATION

OPEN SOURCE VULNERABILTY DATABASE (OSVDB)

53921 : Apache HTTP Server mod_proxy_ajp Cross Thread/Session Information Disclosure.


SECONDARY(S) SOURCE(S)