Package(s):	httpd apache	CVE #(s):	CVE-2009-1195
Created:	May 27, 2009	Updated:	September 14, 2010
Description:	Apache has a flaw in its handling of the Options and AllowOverride directives. In certain specific configurations, local users may be allowed to execute commands from server-side-include scripts despite configuration to the contrary.
Alerts:	rPath rPSA-2010-0056-1 httpd 2010-09-13 Mandriva MDVSA-2009:323 apache 2009-12-07 Fedora FEDORA-2009-8812 httpd 2009-08-20 Slackware SSA:2009-214-01 httpd 2009-08-03 Red Hat RHSA-2009:1156-01 httpd 2009-07-14 Gentoo 200907-04 apache 2009-07-12 Mandriva MDVSA-2009:124-1 apache 2009-07-08 Debian DSA-1816-1 apache2 2009-06-16 SuSE SUSE-SA:2009:050 apache2,libapr1 2009-10-26 Ubuntu USN-787-1 apache2 2009-06-12 rPath rPSA-2009-0142-1 httpd 2009-11-12 rPath rPSA-2009-0142-2 httpd 2009-11-12 Mandriva MDVSA-2009:124 apache 2009-05-31 CentOS CESA-2009:1075 httpd 2009-05-28 Red Hat RHSA-2009:1075-01 httpd 2009-05-27

---

to post comments