CVE-2009-1195

Apache HTTP Server <2.2.11 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

References (44)

Core 44
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35261
Third Party Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1075.html
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50808
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1156.html
Exploit, Issue Tracking, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=489436
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35395
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37152
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/54733
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35115
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507852/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507857/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=129190899612998&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35453
Exploit, Patch, Vendor Advisory x_refsource_confirm
http://svn.apache.org/viewvc?view=rev&revision=772997
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200907-04.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022296
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/Advisories:rPSA-2009-0142
Third Party Advisory, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35264
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:124
Third Party Advisory mailing-list x_refsource_mlist
http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3184
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1444
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1816
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35721
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT3937
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-787-1

Scores

EPSS 0.0196
EPSS Percentile 78.0%

Details

CWE
CWE-16
Status published
Products (9)
apache/http_server 2.2.0
apache/http_server 2.2.1
apache/http_server 2.2.2
apache/http_server 2.2.3
apache/http_server 2.2.4
apache/http_server 2.2.7
apache/http_server 2.2.8
apache/http_server 2.2.9
apache/http_server 2.2.10
Published May 28, 2009
Tracked Since Feb 18, 2026