Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Web Server 安全漏洞
Vulnerability Description
Apache Web Server是一款非常流行的开放源码、功能强大的Web服务器程序,由Apache Software Foundation开发和维护。它可以运行在多种操作系统平台下,例如Unix/Linux/BSD系统以及Windows系统。Apache在处理共享内存Scoreboard存在漏洞,本地攻击者可能利用该漏洞以Apache UID的权限执行任意命令,并且可以以root的权限给任意进程发送SIGUSR1信号,杀死进程,产生拒绝服务。利用Scoreboard覆盖parent[].pid和par
CVSS Information
N/A
Vulnerability Type
N/A