遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2020: 3958 公告中所提及的一個弱點影響。

  - httpd：<FilesMatch>在檔案名稱中發生結尾新行繞過 (CVE-2017-15715)

  - httpd：在 mod_session 中不當處理標頭可讓遠端使用者修改 CGI 應用程式的工作階段資料 (CVE-2018-1283)

  - httpd：mod_cache_socache 中的超出邊界讀取問題可讓遠端攻擊者造成拒絕服務 (CVE-2018-1303)

  - httpd：mod_rewrite 中可能存在開放重新導向 (CVE-2019-10098)

  - httpd：mod_rewrite 組態容易受到開放重新導向影響 (CVE-2020-1927)

  - httpd：mod_proxy_ftp 使用未初始化的值 (CVE-2020-1934)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2020: 4751 公告中所提及的多個弱點影響。

  - httpd：mod_http2：透過緩慢且不需要的要求內文造成 DoS (CVE-2018-17189)

  - httpd：mod_http2：執行字串比較時發生釋放後讀取 (CVE-2019-0196)

  - httpd：mod_http2：執行最新更新時可能發生當機 (CVE-2019-0197)

  - httpd：早期推送中發生記憶體損壞 (CVE-2019-10081)

  - httpd：h2 連接關閉中存在釋放後讀取問題 (CVE-2019-10082)

  - httpd：mod_proxy 錯誤頁面中存在受限的跨網站指令碼 (CVE-2019-10092)

  - httpd：mod_remoteip 中存在 NULL 指標解除參照問題 (CVE-2019-10097)

  - httpd：mod_rewrite 中可能存在開放重新導向 (CVE-2019-10098)

  - httpd：mod_rewrite 組態容易受到開放重新導向影響 (CVE-2020-1927)

  - httpd：mod_proxy_ftp 使用未初始化的值 (CVE-2020-1934)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 6 / 7 主機上安裝的套件受到 RHSA-2020: 2263 公告中提及的多個弱點影響。

  - httpd：mod_rewrite 中可能存在開放重新導向 (CVE-2019-10098)

  - httpd：mod_rewrite 組態容易受到開放重新導向影響 (CVE-2020-1927)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp     may use uninitialized memory when proxying to a     malicious FTP server.(CVE-2020-1934)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an an unexpected URL within the     request URL.(CVE-2020-1927)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in Apache HTTP Server 2.4.0     to 2.4.38. When the path component of a request URL     contains multiple consecutive slashes ('/'), directives     such as LocationMatch and RewriteRule must account for     duplicates in regular expressions while other aspects     of the servers processing will implicitly collapse     them.(CVE-2019-0220)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited     cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link     on the error page to be malformed and instead point to     a page of their choice. This would only be exploitable     where a server was set up with proxying enabled but was     misconfigured in such a way that the Proxy Error page     was displayed.(CVE-2019-10092)

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an unexpected URL within the     request URL.(CVE-2019-10098)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an an unexpected URL within the     request URL.(CVE-2020-1927)

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp     may use uninitialized memory when proxying to a     malicious FTP server.(CVE-2020-1934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the httpd package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3958 advisory.

  - httpd: <FilesMatch> bypass with a trailing newline in the file name (CVE-2017-15715)

  - httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI     applications (CVE-2018-1283)

  - httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS (CVE-2018-1303)

  - httpd: mod_rewrite potential open redirect (CVE-2019-10098)

  - httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

  - httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4751 advisory.

  - httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

  - httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)

  - httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)

  - httpd: memory corruption on early pushes (CVE-2019-10081)

  - httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)

  - httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

  - httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

  - httpd: mod_rewrite potential open redirect (CVE-2019-10098)

  - httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

  - httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2263 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

    * httpd: mod_rewrite potential open redirect (CVE-2019-10098)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Software Collections 3.5 Release     Notes linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
141040	RHEL 7：httpd (RHSA-2020: 3958)	Nessus	Red Hat Local Security Checks	9/29/2020	5/25/2023	high
145821	CentOS 8：httpd：2.4 (CESA-2020: 4751)	Nessus	CentOS Local Security Checks	2/1/2021	2/8/2023	critical
170318	RHEL 6/7：httpd24-httpd 和 httpd24-mod_md (RHSA-2020: 2263)	Nessus	Red Hat Local Security Checks	1/23/2023	6/4/2024	medium
137968	EulerOS Virtualization 3.0.6.0 : httpd (EulerOS-SA-2020-1749)	Nessus	Huawei Local Security Checks	7/1/2020	3/5/2024	medium
137492	EulerOS 2.0 SP2 : httpd (EulerOS-SA-2020-1650)	Nessus	Huawei Local Security Checks	6/17/2020	3/6/2024	medium
135787	Photon OS 3.0: Httpd PHSA-2020-3.0-0079	Nessus	PhotonOS Local Security Checks	4/21/2020	7/23/2024	medium
141040	RHEL 7 : httpd (RHSA-2020:3958)	Nessus	Red Hat Local Security Checks	9/29/2020	5/25/2023	high
145821	CentOS 8 : httpd:2.4 (CESA-2020:4751)	Nessus	CentOS Local Security Checks	2/1/2021	2/8/2023	critical
170318	RHEL 6 / 7 : httpd24-httpd and httpd24-mod_md (RHSA-2020:2263)	Nessus	Red Hat Local Security Checks	1/23/2023	6/4/2024	medium

Detections

Analytics

Plugins Search

high

critical

medium

medium

medium

medium

high

critical

medium