Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache HTTP Server mod_proxy_http信息泄露漏洞
Vulnerability Description
Apache HTTP Server是一款流行的Web服务器。 Windows、 NetWare 及OS/2平台上运行的Apache HTTP Server的 mod_proxy_http的mod_proxy_http.c,在代理工作池等一些配置下,无法删除超时,远程攻击者可利用普通HTTP请求,获得发给其它客户端的潜在敏感响应。
CVSS Information
N/A
Vulnerability Type
N/A