Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache的mod_alias模块CGI脚本源码信息泄露漏洞
Vulnerability Description
Apache是一款开放源代码WEB服务程序。 Apache的mod_alias模块在支持区分大小写目录名的文件系统上处理区分大小写的别名指令参数时存在规范化错误。如果攻击者访问有大写的目录名(如CGI-BIN)的URL的话，就可以在ScriptAlias指令引用了文档根目录中目录的某些非默认配置中泄漏cgi-bin目录中应用程序的源码。 有漏洞配置示例： DocumentRoot "[path]/docroot/" ScriptAlias /cgi-bin/ "/[path]/docroot/cgi-bi
CVSS Information
N/A
Vulnerability Type
N/A