Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache mod_dosevasive 弱安全机制漏洞
Vulnerability Description
Apache是一款开源Web服务器端软件。 Apache中的mod_dosevasive模块存在安全隐患。 1.9及之前版本的mod_dosevasive在创建临时文件时会采用可预测的文件名,这使得远程攻击者可以通过创建symlink的攻击方式来重写任意文件。
CVSS Information
N/A
Vulnerability Type
N/A