NVD

Id
14226  
Name
CVE-2010-2791  
Description
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2013-10-10  
Seq
2010-2791  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78690 14226 CVE-2010-2791 MDVSA-2013:150  View
78691 14226 CVE-2010-2791 [oss-security] 20100730 CVE-2010-2791: mod_proxy information leak affecting 2.2.9 only  View
78692 14226 CVE-2010-2791 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html  View
78693 14226 CVE-2010-2791 RHSA-2010:0659  View
78694 14226 CVE-2010-2791 42102  View
78695 14226 CVE-2010-2791 apache-modproxy-info-disclsoure(60883)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47123 JVNDB-2008-002433 Apache HTTP Server の mod_proxy における重要なレスポンスを取得される脆弱性 Apache HTTP Server の httpd 内にある mod_proxy には、Unix 上で稼働させた際、タイムアウトの検出処理に不備があり、バックエンドの接続を終了しないため、他のクライアントの重要なレスポンスを取得される脆弱性が存在します。 CVE-2010-2791 45371 CVE-2010-2791 14226 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002433.html 2008-10-31 2013-04-19 View