Security Advisory

CVE-2009-1195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-05-28 20:14:00

Last updated 2024-08-07 05:04:49

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

← Browse all CVEs View on cve.org ↗