mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 up to and including 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote malicious users to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache http server 2.2.9 |
||
apache http server 2.2.10 |
||
apache http server 2.2.11 |
||
apache http server 2.2.12 |
||
apache http server 2.2.13 |
||
apache http server 2.2.14 |
||
apache http server 2.2.15 |
||
apache http server 2.3.4 |
||
apache http server 2.3.5 |
Vulmon