← Terug naar CVE-database
Beschrijving
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
Vendors
Apache
Redhat
Oracle
Apple
Canonical
Affected products
Http Server
Enterprise Linux Desktop
Enterprise Linux Eus
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Tus
Enterprise Linux Workstation
Jboss Enterprise Web Server
Enterprise Linux
Enterprise Manager Ops Center
Linux
Solaris
Mac Os X
Mac Os X Server
Ubuntu Linux