|
|
Info |
Last Modified |
| 5 months ago |
|
|
|
|
Description |
Apache Software Foundation Apache and NCSA httpd contain a flaw that may allow a malicious user to execute arbitrary commands. The issue is triggered when a remote attacker requests the 'phf' program with a specially crafted argument, which will execute arbitrary commands on the target machine. This flaw may lead to a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: Remove the 'phf' script from the web server
|
|
Products |
|
Apache
 |
0.8.x |
1.0.1 |
1.0.2 |
1.0.3 |
|
httpd
|
1.1 |
1.2 |
1.3 |
1.4.2 |
1.5c |
|
|
|
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
