Apache HTTP Server mod_rewrite Vulnerability
RISK: Medium Risk
TYPE: Servers - Web Servers
A vulnerability has been identified in Apache HTTP Server, which can be exploited by malicious people to compromise a vulnerable system. The "do_rewritelog()" function (modules/mappers/mod_rewrite.c) does not properly handle certain escape sequences when writing to the log file and can be exploited by sending a specially crafted HTTP request. Successful exploitation of this vulnerability may allow execution of arbitrary commands but requires the user to view the log file in a terminal emulator.
Impact
- Remote Code Execution
System / Technologies affected
- Apache 2.2.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Fixed in the SVN repository
http://svn.apache.org/viewvc?view=revision&revision=r1469311
Vulnerability Identifier
Source
Related Link
Share with