CVE-2009-1191: Medium severity apache http server vulnerability
modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1191?
CVE-2009-1191 is classified as a moderate severity vulnerability due to the risk of exposing sensitive information.
How can CVE-2009-1191 be mitigated?
To mitigate CVE-2009-1191, you should upgrade the Apache HTTP Server to version 2.2.12 or later.
What types of systems are affected by CVE-2009-1191?
CVE-2009-1191 affects Apache HTTP Server version 2.2.11 and several versions of Ubuntu Linux.
What details can an attacker obtain through CVE-2009-1191?
An attacker can obtain sensitive response data that was intended for a client that sent a prior POST request with no body.
Is CVE-2009-1191 a remote attack vector?
Yes, CVE-2009-1191 allows remote attackers to exploit the vulnerability without needing local access to the server.