Nessus Plugin #14771

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Apache <= 1.3.31 htpasswd local overflow

Family:

Misc.

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks the version of Apache

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

The remote host appears to be running a version of Apache which is older
than 1.3.32.

There is a local buffer overflow in htpasswd command in this version,
which may allow a local user to gain the privileges of the httpd process.

*** Note that Nessus solely relied on the version number
*** of the remote server to issue this warning. This might
*** be a false positive

See also : http://xforce.iss.net/xforce/xfdb/17413
Solution : Upgrade to Apache 1.3.32 when available
Risk factor : High