Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Apache htpasswd Overflow

Medium

Synopsis

The remote web server could potentially allow remote attackers to manipulate the password database.

Description

The remote host appears to be running a version of Apache, an open source web server. This version of Apache is vulnerable to a flaw in the 'htpasswd' utility. This issue is not considered a local flaw, as the program is not run setuid. An attacker exploiting this flaw would need to find a vulnerable Apache Web server that was making a call to 'htpasswd' via a CGI script.

Solution

Upgrade or patch according to vendor recommendations.