CVE - CVE-2009-1195

CVE-ID
CVE-2009-1195	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
APPLE:APPLE-SA-2009-11-09-1 URL:http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html BID:35115 URL:http://www.securityfocus.com/bid/35115 BUGTRAQ:20091112 rPSA-2009-0142-1 httpd mod_ssl URL:http://www.securityfocus.com/archive/1/507852/100/0/threaded BUGTRAQ:20091113 rPSA-2009-0142-2 httpd mod_ssl URL:http://www.securityfocus.com/archive/1/507857/100/0/threaded CONFIRM:http://support.apple.com/kb/HT3937 CONFIRM:http://svn.apache.org/viewvc?view=rev&revision=772997 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0142 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=489436 DEBIAN:DSA-1816 URL:http://www.debian.org/security/2009/dsa-1816 FEDORA:FEDORA-2009-8812 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html GENTOO:GLSA-200907-04 URL:http://security.gentoo.org/glsa/glsa-200907-04.xml HP:HPSBUX02612 URL:http://marc.info/?l=bugtraq&m=129190899612998&w=2 HP:SSRT100345 URL:http://marc.info/?l=bugtraq&m=129190899612998&w=2 MANDRIVA:MDVSA-2009:124 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 MLIST:[apache-httpd-dev] 20090423 Includes vs IncludesNoExec security issue - help needed URL:http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2 MLIST:[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E MLIST:[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html URL:https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E OSVDB:54733 URL:http://osvdb.org/54733 OVAL:oval:org.mitre.oval:def:11094 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094 OVAL:oval:org.mitre.oval:def:12377 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377 OVAL:oval:org.mitre.oval:def:8704 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704 REDHAT:RHSA-2009:1075 URL:http://www.redhat.com/support/errata/RHSA-2009-1075.html REDHAT:RHSA-2009:1156 URL:http://www.redhat.com/support/errata/RHSA-2009-1156.html SECTRACK:1022296 URL:http://www.securitytracker.com/id?1022296 SECUNIA:35261 URL:http://secunia.com/advisories/35261 SECUNIA:35264 URL:http://secunia.com/advisories/35264 SECUNIA:35395 URL:http://secunia.com/advisories/35395 SECUNIA:35453 URL:http://secunia.com/advisories/35453 SECUNIA:35721 URL:http://secunia.com/advisories/35721 SECUNIA:37152 URL:http://secunia.com/advisories/37152 SUSE:SUSE-SA:2009:050 URL:http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html UBUNTU:USN-787-1 URL:http://www.ubuntu.com/usn/usn-787-1 VUPEN:ADV-2009-1444 URL:http://www.vupen.com/english/advisories/2009/1444 VUPEN:ADV-2009-3184 URL:http://www.vupen.com/english/advisories/2009/3184 XF:apache-allowoverrides-security-bypass(50808) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/50808
Assigning CNA
Red Hat, Inc.
Date Record Created
20090331	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090331)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)