Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache HTTP Server ‘LD_LIBRARY_PATH’ 权限许可和访问控制问题漏洞
Vulnerability Description
Apache HTTP Server是流行的开源WEB服务器程序，可使用在Unix和Windows操作系统下。 Apache HTTP Server 2.4.2之前版本中的envvars（也称envvars-std）中存在漏洞，该漏洞源于在LD_LIBRARY_PATH中放置了一个零长度的目录名。本地用户在执行apachectl时，可借助在当前工作的目录中的特洛伊木马DSO，获取权限。
CVSS Information
N/A
Vulnerability Type
N/A