FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1195

This CVE name corresponds to:

Entered	Topic
2009-08-25	apache22 -- several vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-1195 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-1195
Phase	Assigned(20090331)

Description

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.

References

Source	Reference
BUGTRAQ	20091112 rPSA-2009-0142-1 httpd mod_ssl
BUGTRAQ	20091113 rPSA-2009-0142-2 httpd mod_ssl
MLIST	[apache-httpd-dev] 20090423 Includes vs IncludesNoExec security issue - help needed
CONFIRM	http://svn.apache.org/viewvc?view=rev&revision=772997
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=489436
CONFIRM	http://support.apple.com/kb/HT3937
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2009-0142
APPLE	APPLE-SA-2009-11-09-1
DEBIAN	DSA-1816
FEDORA	FEDORA-2009-8812
GENTOO	GLSA-200907-04
HP	HPSBUX02612
HP	SSRT100345
MANDRIVA	MDVSA-2009:124
REDHAT	RHSA-2009:1075
REDHAT	RHSA-2009:1156
SUSE	SUSE-SA:2009:050
UBUNTU	USN-787-1
BID	35115
OSVDB	54733
OVAL	oval:org.mitre.oval:def:11094
OVAL	oval:org.mitre.oval:def:8704
OVAL	oval:org.mitre.oval:def:12377
SECTRACK	1022296
SECUNIA	35261
SECUNIA	35264
SECUNIA	35453
SECUNIA	35395
SECUNIA	35721
SECUNIA	37152
VUPEN	ADV-2009-1444
VUPEN	ADV-2009-3184
XF	apache-allowoverrides-security-bypass(50808)