Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 安全漏洞
Vulnerability Description
Apache是一款广泛流行的开放源代码的WEB服务程序。Apache 2.0.40以前的for windows版本中存在一个泄漏物理路径漏洞，远程攻击者可以利用这个漏洞获得服务器物理路径信息。当客户端请求一个.var后缀的不存在的文件时，Apache 2.0.x for Windows会返回一些出错信息。这些信息中包含Apache的物理路径，这可能允许攻击者了解服务器的配置情况，可能有助于发动进一步攻击。Unix和其他平台的Apache Web服务程序不受此漏洞影响，Cygwin用户受到此漏洞影响。
CVSS Information
N/A
Vulnerability Type
N/A