Debian/apache2: unknown
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Op
Action: Upgrade apache2 to 2.2.11-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.11-6 | - |
Fixed versions
| 2.2.11-6 |
Sources
- osv: DEBIAN-CVE-2009-1195#Debian:13/apache2
- https://security-tracker.debian.org/tracker/CVE-2009-1195
published · modified · JSON