NVD

Id
11990  
Name
CVE-2010-0434  
Description
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-03-05  
Modified Date
2016-08-22  
Seq
2010-0434  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66151 11990 CVE-2010-0434 http://httpd.apache.org/security/vulnerabilities_22.html  View
66152 11990 CVE-2010-0434 APPLE-SA-2010-11-10-1  View
66153 11990 CVE-2010-0434 FEDORA-2010-5942  View
66154 11990 CVE-2010-0434 FEDORA-2010-6131  View
66155 11990 CVE-2010-0434 SUSE-SR:2010:010  View
66156 11990 CVE-2010-0434 [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues  View
66157 11990 CVE-2010-0434 SSRT100108  View
66158 11990 CVE-2010-0434 oval:org.mitre.oval:def:10358  View
66159 11990 CVE-2010-0434 oval:org.mitre.oval:def:8695  View
66160 11990 CVE-2010-0434 http://support.apple.com/kb/HT4435  View
66161 11990 CVE-2010-0434 http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h  View
66162 11990 CVE-2010-0434 http://svn.apache.org/viewvc?view=revision&revision=917867  View
66163 11990 CVE-2010-0434 http://svn.apache.org/viewvc?view=revision&revision=918427  View
66164 11990 CVE-2010-0434 PM08939  View
66165 11990 CVE-2010-0434 PM12247  View
66166 11990 CVE-2010-0434 PM15829  View
66167 11990 CVE-2010-0434 DSA-2035  View
66168 11990 CVE-2010-0434 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
66169 11990 CVE-2010-0434 RHSA-2010:0168  View
66170 11990 CVE-2010-0434 RHSA-2010:0175  View
66171 11990 CVE-2010-0434 38494  View
66172 11990 CVE-2010-0434 http://www.vmware.com/security/advisories/VMSA-2010-0014.html  View
66173 11990 CVE-2010-0434 ADV-2010-0911  View
66174 11990 CVE-2010-0434 ADV-2010-0994  View
66175 11990 CVE-2010-0434 ADV-2010-1001  View
66176 11990 CVE-2010-0434 ADV-2010-1057  View
66177 11990 CVE-2010-0434 ADV-2010-1411  View
66178 11990 CVE-2010-0434 apache-http-rh-info-disclosure(56625)  View
66179 11990 CVE-2010-0434 https://bugzilla.redhat.com/show_bug.cgi?id=570171  View
66180 11990 CVE-2010-0434 https://issues.apache.org/bugzilla/show_bug.cgi?id=48359  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35394 JVNDB-2010-001174 Apache HTTP Server の ap_read_request 関数における重要な情報を取得される脆弱性 Apache HTTP Server の server/protocol.c の ap_read_request 関数には、マルチスレッドの MPM が使用されている場合、サブリクエストのヘッダの処理において不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2010-0434 43014 CVE-2010-0434 11990 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001174.html 2010-03-05 2014-05-21 View