Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 配置错误漏洞
Vulnerability Description
Apache HTTP Server是一款流行的Web服务器。 Apache HTTP Server没有正确地处理AllowOverride指令中的Options=IncludesNOEXEC选项，本地用户可以通过在.htaccess文件中配置(1) Options Includes、(2) Options +Includes或(3) Options +IncludesNOEXEC并在.shtml文件中注入exec元素导致绕过安全限制获得权限。
CVSS Information
N/A
Vulnerability Type
N/A