NVD

Id
13557  
Name
CVE-2010-2068  
Description
mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-06-18  
Modified Date
2013-10-10  
Seq
2010-2068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74849 13557 CVE-2010-2068 http://httpd.apache.org/security/vulnerabilities_22.html  View
74850 13557 CVE-2010-2068 APPLE-SA-2011-03-21-1  View
74851 13557 CVE-2010-2068 [httpd-announce] 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068  View
74852 13557 CVE-2010-2068 [apache-announce] 20100725 [ANNOUNCEMENT] Apache HTTP Server 2.2.16 Released  View
74853 13557 CVE-2010-2068 oval:org.mitre.oval:def:11491  View
74854 13557 CVE-2010-2068 oval:org.mitre.oval:def:6931  View
74855 13557 CVE-2010-2068 1024096  View
74856 13557 CVE-2010-2068 http://support.apple.com/kb/HT4581  View
74857 13557 CVE-2010-2068 SI4053  View
74858 13557 CVE-2010-2068 http://www.apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch  View
74859 13557 CVE-2010-2068 http://www.apache.org/dist/httpd/patches/apply_to_2.3.5/CVE-2010-2068-r953418.patch  View
74860 13557 CVE-2010-2068 PM16366  View
74861 13557 CVE-2010-2068 HPSBMA02568  View
74862 13557 CVE-2010-2068 MDVSA-2013:150  View
74863 13557 CVE-2010-2068 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html  View
74864 13557 CVE-2010-2068 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
74865 13557 CVE-2010-2068 RHSA-2011:0896  View
74866 13557 CVE-2010-2068 20100611 [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068  View
74867 13557 CVE-2010-2068 40827  View
74868 13557 CVE-2010-2068 ADV-2010-1436  View
74869 13557 CVE-2010-2068 apache-modproxyhttp-timeout-info-disc(59413)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35864 JVNDB-2010-001644 Apache HTTP Server の mod_proxy_http における重要なレスポンスを取得される脆弱性 Apache HTTP Server の mod_proxy_http には、タイムアウトの検出に不備があるため、他のクライアントの重要なレスポンスを取得される脆弱性が存在します。 CVE-2010-2068 44648 CVE-2010-2068 13557 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001644.html 2010-06-18 2013-07-18 View