CVE-2006-4110: Medium severity Apache HTTP Server vulnerability
Published Aug 14, 2006
·Updated
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.
Affected Software
3 affected components
Apache HTTP Server=2.0.58
Apache HTTP Server=2.2.2
Apache HTTP Server=2.2.3
Event History
Aug 14, 2006
CVE Published
08:04 PM
Aug 15, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4110?
CVE-2006-4110 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-4110?
To fix CVE-2006-4110, upgrade to a version of Apache HTTP Server that is not vulnerable, such as 2.2.4 or later.
3
Which versions of Apache are affected by CVE-2006-4110?
CVE-2006-4110 affects Apache HTTP Server versions 2.0.58 and 2.2.2 running on Windows.
4
What type of attack does CVE-2006-4110 allow?
CVE-2006-4110 allows remote attackers to read the source code of CGI programs due to case sensitivity issues.
5
Is CVE-2006-4110 specific to Windows operating systems?
Yes, CVE-2006-4110 specifically targets the Apache HTTP Server running on Windows.